DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2025-03-13
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Daten zu manipulieren, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, einen Denial of Service Zustand herbeizuführen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11235US | high8.1 | — | ||
In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If t… | ||||
| CVE-2025-1861US | critical9.8 | — | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there i… | ||||
| CVE-2025-1736US | high7.3 | — | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of th… | ||||
| CVE-2025-1734US | medium5.3 | — | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (… | ||||
| CVE-2025-1219US | medium5.3 | Exploit | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions,… | ||||
| CVE-2025-1217US | low3.1 | — | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server,… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2025-7489 vom 2025-06-28external
- Red Hat Security Advisory RHSA-2025:15687 vom 2025-09-11external
- Red Hat Security Advisory RHSA-2025:4263 vom 2025-04-28external
- Red Hat Security Advisory RHSA-2025:7418 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2025:7431 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2025:7432 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2025:7489 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2026:2470 vom 2026-02-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan