Количество 16
Количество 16
GHSA-xr7j-rvgx-xq5p
Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
CVE-2026-91767
php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default.
CVE-2026-91767
php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default.
CVE-2026-91767
php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default.
CVE-2026-91767
Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
CVE-2026-91767
php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows ...
openSUSE-SU-2026:22045-1
Security update for php8
SUSE-SU-2026:4651-1
Security update for php8
SUSE-SU-2026:4603-1
Security update for php8
SUSE-SU-2026:4602-1
Security update for php8
ALT-PU-2026-17471
ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1
ALT-PU-2026-17464
ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1
ALT-PU-2026-17462
ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1
ALT-PU-2026-17414
ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1
RLSA-2026:87080
Important: php:7.4 security update
ELSA-2026-87080
ELSA-2026-87080: php:7.4 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xr7j-rvgx-xq5p Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN | CVSS3: 6.5 | 0% Низкий | 30 дней назад |
 | CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP client read up to SIZE_MAX bytes past the end of a heap allocation. The path is reachable from any default client stream, because verify_peer_name is enabled by default. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN | CVSS3: 6.5 | 0% Низкий | 18 дней назад |
| CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows ... | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | openSUSE-SU-2026:22045-1 Security update for php8 | 17 дней назад | ||
| SUSE-SU-2026:4651-1 Security update for php8 | 10 дней назад | ||
| SUSE-SU-2026:4603-1 Security update for php8 | 15 дней назад | ||
| SUSE-SU-2026:4602-1 Security update for php8 | 15 дней назад | ||
| ALT-PU-2026-17471 ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17464 ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17462 ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17414 ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1 | CVSS3: 7.5 | 18 дней назад | |
 | RLSA-2026:87080 Important: php:7.4 security update | 2 дня назад | ||
| ELSA-2026-87080 ELSA-2026-87080: php:7.4 security update (IMPORTANT) | 3 дня назад |
Уязвимостей на страницу