The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_4263 advisory.

    * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)

    * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)

    * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7315 advisory.

    - Fix Leak partial content of the heap through heap buffer over-read       CVE-2024-8929
    - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs       CVE-2024-11234
    - Fix Single byte overread with convert.quoted-printable-decode filter       CVE-2024-11233
    - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision       CVE-2024-8927
    - Fix Logs from childrens may be altered       CVE-2024-9026
    - Fix Erroneous parsing of multipart form data       CVE-2024-8925
    - Fix filter bypass in filter_var FILTER_VALIDATE_URL       CVE-2024-5458
    - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix       CVE-2024-2756
    - Fix password_verify can erroneously return true opening ATO risk       CVE-2024-3096

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-873 advisory.

    The upstream advisory describes this issue as follows:

    A memory-related vulnerability in PHP's filter handling system, particularly when processing input with     convert.quoted-printable-decode filters, leads to a segmentation fault. This vulnerability is triggered     through specific sequences of input data, causing PHP to crash. When exploited, it allows an attacker to     extract a single byte of data from the heap or cause a DoS. (CVE-2024-11233)

    The upstream advisory describes this issue as follows:

    Configuring a proxy in a stream context might allow for CRLF injection in URIs, resulting in HTTP request     smuggling attacks. (CVE-2024-11234)

    Erroneous parsing of multipart form data

    NOTE: Fixed in 8.3.12, 8.2.24NOTE: https://github.com/php/php-     src/security/advisories/GHSA-9pqp-7h25-4f32NOTE: https://github.com/php/php-     src/commit/19b49258d0c5a61398d395d8afde1123e8d161e0 (PHP-8.2.24) (CVE-2024-8925)

    cgi.force_redirect configuration is byppassible due to the environment variable collision

    NOTE: Fixed in 8.3.12, 8.2.24NOTE: https://github.com/php/php-     src/security/advisories/GHSA-94p6-54jq-9mwpNOTE: https://github.com/php/php-     src/commit/48808d98f4fc2a05193cdcc1aedd6c66816450f1 (PHP-8.2.24) (CVE-2024-8927)

    php: Erroneous parsing of multipart form data (CVE-2024-8928)

    The upstream advisory describes this issue as follows:

    By connecting to a fake MySQL server or tampering with network packets and initiating a SQL Query, it is     possible to abuse the function static enum_func_status php_mysqlnd_rset_field_read when parsing MySQL     fields packets in order to include the rest of the heap content starting from the address of the cursor of     the currently read buffer.

    Using PHP-FPM which stays alive between request, and between two different SQL query requests, as the     previous buffer used to store received data from MySQL is not emptied and malloc allocates a memory region     which is very near the previous one, one is able to extract the response content of the previous MySQL     request from the PHP-FPM worker. (CVE-2024-8929)

    The upstream advisory describes this issue as follows:

    Uncontrolled long string inputs to ldap_escape on 32-bit systems can cause an integer overflow, resulting     in an out-of-bounds write. (CVE-2024-8932)

    Logs from childrens may be altered

    NOTE: Fixed in 8.3.12, 8.2.24NOTE: https://github.com/php/php-     src/security/advisories/GHSA-865w-9rf3-2wh5NOTE: https://github.com/php/php-     src/commit/1f8e16172c7961045c2b0f34ba7613e3f21cdee8 (PHP-8.2.24) (CVE-2024-9026)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9709:01 advisory.

    * CVE-2024-8929: fix various heap buffer over-reads     CVE(s):
    CVE-2024-8929     In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can     cause the client to disclose the content of its heap containing data from other SQL requests and possible     other data belonging to different users of the same server.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757946824 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2470 advisory.

    - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs       CVE-2024-11234
    - Fix Single byte overread with convert.quoted-printable-decode filter       CVE-2024-11233
    - Fix Leak partial content of the heap through heap buffer over-read       CVE-2024-8929
    - Fix libxml streams use wrong content-type header when requesting a redirected resource       CVE-2025-1219
    - Fix Stream HTTP wrapper header check might omit basic auth header       CVE-2025-1736
    - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes       CVE-2025-1861
    - Fix Streams HTTP wrapper does not fail for headers without colon       CVE-2025-1734
    - Fix Header parser of http stream wrapper does not handle folded headers       CVE-2025-1217
    - Fix pgsql extension does not check for errors during escaping       CVE-2025-1735
    - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix       CVE-2025-6491
    - Fix Null byte termination in hostnames       CVE-2025-1220
    - Fix Heap buffer overflow in array_merge()       CVE-2025-14178
    - Fix Information Leak of Memory in getimagesize       CVE-2025-14177

    php-pear

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7432 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)

    * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)

    * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7432 advisory.

    * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)
      * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)
      * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)
      * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
      * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
      * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
      * php: libxml streams use wrong content-type header when requesting a redirected resource     (CVE-2025-1219)
      * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15687 advisory.

    libzip     php     [8.2.28-1]
    - rebase to 8.2.28

    php-pear     php-pecl-apcu     php-pecl-rrd     php-pecl-xdebug3     php-pecl-zip

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15687 advisory.

    * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)

    * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)

    * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)

    * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)

    * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)

    * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)

    * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)

    * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Red Hat Enterprise Linux - php: Leak partial content of the heap through heap buffer over-read in mysqlnd     Ubuntu Linux - In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile     MySQL server can cause the client to disclose the content of its heap containing data from other SQL     requests and possible other data belonging to different users of the same server. (CVE-2024-8929)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
354602	Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2025_4263)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	medium
237036	Oracle Linux 9 : php (ELSA-2025-7315)	Nessus	Oracle Linux Local Security Checks	2025/5/22	2025/9/11	high
281609	Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2025-873)	Nessus	Amazon Linux Local Security Checks	2026/1/2	2026/1/2	high
291783	MiracleLinux 7 : php-5.4.16-48.0.5.el7.AXS7 (AXSA:2025-9709:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
362334	AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (ALMALINUX9.2:CLSA-2025:1757946824)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/2	medium
298812	Oracle Linux 8 : php:7.4 (ELSA-2026-2470)	Nessus	Oracle Linux Local Security Checks	2026/2/12	2026/2/12	medium
237310	RHEL 9 : php:8.2 (RHSA-2025:7432)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/6/5	medium
241285	AlmaLinux 9 : php:8.2 (ALSA-2025:7432)	Nessus	Alma Linux Local Security Checks	2025/7/3	2025/7/3	medium
264580	Oracle Linux 8 : php:8.2 (ELSA-2025-15687)	Nessus	Oracle Linux Local Security Checks	2025/9/11	2025/9/11	medium
298631	RockyLinux 8 : php:8.2 (RLSA-2025:15687)	Nessus	Rocky Linux Local Security Checks	2026/2/11	2026/2/18	medium
231701	Linux Distros Unpatched Vulnerability : CVE-2024-8929	Nessus	Misc.	2025/3/6	2026/11/5	high

偵測

搜尋 Plugin

medium

high

high

medium

medium

medium

medium

medium

medium

medium

high