DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2023-08-06
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3824US | critical9.8 | Exploit | ||
In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lea… | ||||
| CVE-2023-3823US | high7.5 | — | ||
In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether ex… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:5926 vom 2023-10-19external
- Red Hat Security Advisory RHSA-2023:5927 vom 2023-10-20external
- Red Hat Security Advisory RHSA-2024:0387 vom 2024-01-25external
- Red Hat Security Advisory RHSA-2024:10952 vom 2024-12-11external
- Amazon Linux Security Advisory ALAS-2025-2832 vom 2025-04-16external
- Amazon Linux Security Advisory ALASPHP8.0-2023-009 vom 2023-09-14external
- Amazon Linux Security Advisory ALASPHP8.1-2023-004 vom 2023-09-14external
- Amazon Linux Security Advisory ALASPHP8.2-2023-002 vom 2023-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan