DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2023-02-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsmechanismen zu umgehen und um unbekannte Auswirkungen zu erzielen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0567US | medium6.2 | — | ||
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends… | ||||
| CVE-2023-0662US | high7.5 | — | ||
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of lo… | ||||
| CVE-2023-0568US | high8.1 | — | ||
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:5926 vom 2023-10-19external
- Red Hat Security Advisory RHSA-2023:5927 vom 2023-10-20external
- Red Hat Security Advisory RHSA-2024:0387 vom 2024-01-25external
- Red Hat Security Advisory RHSA-2024:10952 vom 2024-12-11external
- Amazon Linux Security Advisory ALAS-2023-2375 vom 2023-12-05external
- Amazon Linux Security Advisory ALAS-2025-2832 vom 2025-04-16external
- Amazon Linux Security Advisory ALASPHP8.0-2023-002 vom 2023-09-14external
- Amazon Linux Security Advisory ALASPHP8.1-2023-002 vom 2023-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan