PHP Stale Internal Request-State Vulnerability

Mô tả

Tham khảo

• php/php-src security advisory · Mitigation
• openwall.com/lists/oss-security/2026/10/21/16 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/17 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/23 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/7 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/14 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/15 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/16 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/19 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/2 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/20 · Mailing List

Tin liên quan

• CISA xác nhận PHP2Shell đang bị khai thác; cơ quan Mỹ phải vá trước 29/10 · 26/10/2026

Lỗ hổng khác của php

• CVE-2026-109618NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
• CVE-2026-92842TRUNG BÌNH 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
• CVE-2026-91768TRUNG BÌNH 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
• CVE-2026-91769TRUNG BÌNH 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…
• CVE-2026-91767TRUNG BÌNH 6.5php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate …