Lucene search
GoogleOSV:SUSE-SU-2024:2037-1HistoryJun 17, 2024 - 7:30 a.m.
Security update for php7
2024-06-1707:30:42
Google
osv.dev
php7
security update
cve-2024-2756
cve-2024-3096
cve-2024-5458
cookie security
password verification
url filter bypass
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
This update for php7 fixes the following issues:
- CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857)
- CVE-2024-3096: Fixed bypass on null byte leading passwords checked via password_verify (bsc#1222858)
- CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073)
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2037-1)
2024-06-18 00:00:00
openSUSE: Security Advisory for php8 (SUSE-SU-2024:1446-1)
2024-04-27 00:00:00
openSUSE: Security Advisory for php7 (SUSE-SU-2024:1444-1)
2024-04-27 00:00:00
nessus
nessus
SUSE SLES15 Security Update : php7 (SUSE-SU-2024:2037-1)
2024-06-18 00:00:00
SUSE SLES12 Security Update : php74 (SUSE-SU-2024:1445-1)
2024-04-29 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : php7 (SUSE-SU-2024:1444-1)
2024-04-29 00:00:00
debian
debian
[SECURITY] [DLA 3810-1] php7.3 security update
2024-05-07 23:30:41
[SECURITY] [DSA 5661-1] php8.2 security update
2024-04-15 19:27:08
[SECURITY] [DSA 5660-1] php7.4 security update
2024-04-15 19:25:52
fedora
fedora
[SECURITY] Fedora 39 Update: php-8.2.18-1.fc39
2024-04-19 01:18:35
[SECURITY] Fedora 38 Update: php-8.2.18-1.fc38
2024-04-19 02:53:20
[SECURITY] Fedora 40 Update: php-8.3.6-1.fc40
2024-04-19 21:43:53
slackware
slackware
[slackware-security] php
2024-04-12 19:36:41
[slackware-security] php
2022-09-30 18:00:43
[slackware-security] php
2024-06-06 19:53:01
mageia
mageia
Updated php packages fix security vulnerabilities
2024-04-13 19:56:38
Updated php packages fix security vulnerability
2024-07-11 04:04:23
Updated php packages fix security vulnerability
2022-10-08 23:22:22
vulnrichment
vulnrichment
osv
osv
php7.3 - security update
2024-05-07 00:00:00
BIT-php-2024-2756
2024-05-14 07:29:36
php7.4, php8.1, php8.2 vulnerabilities
2024-05-02 15:57:55
alpinelinux
alpinelinux
ubuntucve
ubuntucve
debiancve
debiancve
nvd
nvd
cve
cve
cvelist
cvelist
redhatcve
redhatcve
cloudlinux
cloudlinux
php: Fix of 2 CVEs
2024-05-09 18:56:08
freebsd
freebsd
php -- Multiple vulnerabilities
2024-04-11 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2024-04-29 00:00:00
PHP vulnerabilities
2024-05-02 00:00:00
PHP vulnerabilities
2022-11-08 00:00:00
f5
f5
K000140695: PHP vulnerability CVE-2024-5458
2024-08-13 00:00:00
githubexploit
githubexploit
Exploit for Insufficient Verification of Data Authenticity in Php
2024-09-17 00:22:23
Exploit for Improper Input Validation in Php
2022-10-07 08:15:23
cbl_mariner
cbl_mariner
CVE-2024-5458 affecting package php for versions less than 8.3.8-1
2024-07-02 23:30:04
CVE-2024-3096 affecting package php for versions less than 8.3.4-1
2024-05-17 21:38:35
CVE-2024-5458 affecting package php for versions less than 8.1.29-1
2024-06-16 16:44:02
wolfi
wolfi
CVE-2024-5458 vulnerabilities
2024-09-21 15:27:10
redos
redos
ROS-20240820-08
2024-08-20 00:00:00
ROS-20240730-07
2024-07-30 00:00:00
ROS-20240826-02
2024-08-26 00:00:00
prion
prion
Code injection
2022-09-28 23:15:00
checkpoint_advisories
checkpoint_advisories
PHP Authentication Bypass (CVE-2022-31629)
2022-11-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.0 version 8.0.24-alt1
2022-10-13 00:00:00
Security fix for the ALT Linux 10 package php8.2 version 8.1.11-alt1
2022-09-30 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 8.1.11-alt1
2022-10-11 00:00:00
veracode
veracode
Insecure Cookie
2022-09-30 11:10:30
suse
suse
Security update for php7 (moderate)
2022-11-01 00:00:00
Security update for php8 (important)
2022-10-19 00:00:00
gentoo
gentoo
PHP: Multiple Vulnerabilities
2024-08-12 00:00:00
PHP: Multiple Vulnerabilities
2022-11-19 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.6
Confidence
High
Related for OSV:SUSE-SU-2024:2037-1