Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.AL2_ALASPHP8_0-2023-002.NASL
HistorySep 13, 2023 - 12:00 a.m.

Amazon Linux 2 : php (ALASPHP8.0-2023-002)

2023-09-1300:00:00
This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
6
JSON

The version of php installed on the remote host is prior to 8.0.28-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.0-2023-002 advisory.

  • In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid. (CVE-2023-0567)

  • In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. (CVE-2023-0662)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2 Security Advisory ALASPHP8.0-2023-002.
##

include('compat.inc');

if (description)
{
  script_id(181376);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/18");

  script_cve_id("CVE-2023-0567", "CVE-2023-0568", "CVE-2023-0662");
  script_xref(name:"IAVA", value:"2023-A-0105-S");
  script_xref(name:"IAVA", value:"2023-A-0423");

  script_name(english:"Amazon Linux 2 : php (ALASPHP8.0-2023-002)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of php installed on the remote host is prior to 8.0.28-1. It is, therefore, affected by multiple
vulnerabilities as referenced in the ALAS2PHP8.0-2023-002 advisory.

  - In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may
    accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database,
    it may lead to an application allowing any password for this entry as valid. (CVE-2023-0567)

  - In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP
    form upload can cause high resource consumption and excessive number of log entries. This can cause denial
    of service on the affected server by exhausting CPU resources or disk space. (CVE-2023-0662)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/AL2/ALASPHP8.0-2023-002.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/cve/html/CVE-2023-0567.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/cve/html/CVE-2023-0568.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/cve/html/CVE-2023-0662.html");
  script_set_attribute(attribute:"solution", value:
"Run 'yum update php' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-0568");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/02/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/08/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/09/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-bcmath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-cli");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-dba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-dbg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-embedded");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-enchant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-fpm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-gmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-intl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-ldap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-mbstring");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-mysqlnd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-odbc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-opcache");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-pdo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-pgsql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-process");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-pspell");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-sodium");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php-xml");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "2")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'php-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-bcmath-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-bcmath-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-cli-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-cli-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-common-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-common-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-dba-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-dba-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-dbg-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-dbg-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-debuginfo-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-debuginfo-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-devel-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-devel-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-embedded-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-embedded-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-enchant-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-enchant-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-fpm-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-fpm-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-gd-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-gd-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-gmp-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-gmp-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-intl-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-intl-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-ldap-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-ldap-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-mbstring-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-mbstring-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-mysqlnd-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-mysqlnd-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-odbc-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-odbc-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-opcache-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-opcache-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pdo-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pdo-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pgsql-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pgsql-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-process-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-process-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pspell-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-pspell-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-snmp-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-snmp-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-soap-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-soap-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-sodium-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-sodium-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-xml-8.0.28-1.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'},
    {'reference':'php-xml-8.0.28-1.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'php8.0'}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php / php-bcmath / php-cli / etc");
}
VendorProductVersionCPE
amazonlinuxphpp-cpe:/a:amazon:linux:php
amazonlinuxphp-bcmathp-cpe:/a:amazon:linux:php-bcmath
amazonlinuxphp-clip-cpe:/a:amazon:linux:php-cli
amazonlinuxphp-commonp-cpe:/a:amazon:linux:php-common
amazonlinuxphp-dbap-cpe:/a:amazon:linux:php-dba
amazonlinuxphp-dbgp-cpe:/a:amazon:linux:php-dbg
amazonlinuxphp-debuginfop-cpe:/a:amazon:linux:php-debuginfo
amazonlinuxphp-develp-cpe:/a:amazon:linux:php-devel
amazonlinuxphp-embeddedp-cpe:/a:amazon:linux:php-embedded
amazonlinuxphp-enchantp-cpe:/a:amazon:linux:php-enchant
Rows per page:
1-10 of 281

Related

nessus 46
slackware 1
fedora 2
openvas 14
altlinux 3
ubuntu 3
osv 18
mageia 1
cloudlinux 1
debian 2
redos 1
redhat 3
rocky 3
almalinux 3
oraclelinux 3
alpinelinux 3
prion 3
cbl_mariner 3
ubuntucve 3
f5 2
redhatcve 3
cve 3
veracode 3
debiancve 3
amazon 2
github 1
hp 1
ics 1
oracle 2
nessus
nessus
SUSE SLES12 Security Update : php74 (SUSE-SU-2023:0515-1)
2023-02-25 00:00:00
Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2023-045-02)
2023-02-15 00:00:00
Fedora 37 : php (2023-452714dbc6)
2023-02-24 00:00:00
slackware
slackware
[slackware-security] php
2023-02-15 03:06:12
fedora
fedora
[SECURITY] Fedora 37 Update: php-8.1.16-1.fc37
2023-02-24 04:47:32
[SECURITY] Fedora 36 Update: php-8.1.16-1.fc36
2023-02-24 03:47:37
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0514-1)
2023-03-28 00:00:00
PHP < 8.0.28, 8.1.x < 8.1.16, 8.2.x < 8.2.3 Security Update - Linux
2023-02-15 00:00:00
PHP < 8.0.28, 8.1.x < 8.1.16, 8.2.x < 8.2.3 Security Update - Windows
2023-02-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.0 version 8.0.28-alt1
2023-02-21 00:00:00
Security fix for the ALT Linux 10 package php8.2 version 8.2.3-alt1
2023-02-21 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 8.1.16-alt1
2023-02-17 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2023-02-28 00:00:00
PHP vulnerabilities
2023-03-02 00:00:00
PHP vulnerability
2023-05-02 00:00:00
osv
osv
php7.2, php7.4, php8.1 vulnerabilities
2023-02-28 14:18:17
php7.4 - security update
2023-02-24 00:00:00
php7.3 - security update
2023-02-26 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2023-02-27 23:27:16
cloudlinux
cloudlinux
php: Fix of 3 CVEs
2023-03-09 21:01:01
debian
debian
[SECURITY] [DLA 3345-1] php7.3 security update
2023-02-26 22:00:18
[SECURITY] [DSA 5363-1] php7.4 security update
2023-02-24 19:21:10
redos
redos
ROS-20230418-02
2023-04-18 00:00:00
redhat
redhat
(RHSA-2023:5926) Important: php security update
2023-10-19 12:43:29
(RHSA-2024:0387) Moderate: php:8.1 security update
2024-01-24 09:41:37
(RHSA-2023:5927) Important: php:8.0 security update
2023-10-19 12:45:04
rocky
rocky
php:8.0 security update
2023-10-24 18:35:47
php:8.1 security update
2024-02-12 20:17:50
php security update
2023-10-24 18:36:55
almalinux
almalinux
Moderate: php:8.1 security update
2024-01-24 00:00:00
Important: php:8.0 security update
2023-10-19 00:00:00
Important: php security update
2023-10-19 00:00:00
oraclelinux
oraclelinux
php security update
2023-10-22 00:00:00
php:8.0 security update
2023-10-23 00:00:00
php:8.1 security update
2024-01-25 00:00:00
alpinelinux
alpinelinux
CVE-2023-0568
2023-02-16 07:15:10
CVE-2023-0662
2023-02-16 07:15:10
CVE-2023-0567
2023-03-01 08:15:11
prion
prion
Design/Logic Flaw
2023-02-16 07:15:00
Design/Logic Flaw
2023-02-16 07:15:00
Default credentials
2023-03-01 08:15:00
cbl_mariner
cbl_mariner
CVE-2023-0568 affecting package php 8.1.12-1
2023-03-09 00:25:04
CVE-2023-0567 affecting package php 8.1.12-1
2023-03-09 00:25:04
CVE-2023-0662 affecting package php 8.1.12-1
2023-03-09 00:25:04
ubuntucve
ubuntucve
CVE-2023-0568
2023-02-16 00:00:00
CVE-2023-0567
2023-02-15 00:00:00
CVE-2023-0662
2023-02-16 00:00:00
f5
f5
K000133753 : PHP vulnerability CVE-2023-0662
2023-05-01 00:00:00
K000134747 : PHP vulnerability CVE-2023-0568
2023-05-23 00:00:00
redhatcve
redhatcve
CVE-2023-0662
2023-02-17 12:00:27
CVE-2023-0568
2023-02-17 12:00:27
CVE-2023-0567
2023-02-17 12:00:22
cve
cve
CVE-2023-0568
2023-02-16 07:15:10
CVE-2023-0662
2023-02-16 07:15:10
CVE-2023-0567
2023-03-01 08:15:11
veracode
veracode
Incorrect Calculation Of Buffer Size
2023-02-17 10:23:44
Authentication Bypass
2023-02-17 10:36:14
Denial Of Service (DoS)
2023-02-18 00:53:19
debiancve
debiancve
CVE-2023-0568
2023-02-16 07:15:10
CVE-2023-0567
2023-03-01 08:15:11
CVE-2023-0662
2023-02-16 07:15:10
amazon
amazon
Important: php56
2023-10-30 23:31:00
Important: php
2023-11-29 22:20:00
github
github
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
2023-05-17 17:07:57
hp
hp
HP Device Manager Security Updates
2023-04-13 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
JSON
Related for AL2_ALASPHP8_0-2023-002.NASL
nessus46slackware1fedora2openvas14altlinux3ubuntu3osv18mageia1cloudlinux1debian2redos1redhat3rocky3almalinux3oraclelinux3alpinelinux3prion3cbl_mariner3ubuntucve3f52redhatcve3cve3veracode3debiancve3amazon2github1hp1ics1oracle2