The version of PHP installed on the remote host is prior to 8.3.12. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.12 advisory.

  - In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-     CGI on Windows, if the system is set up to use certain code pages, Windows may use Best-Fit behavior to     replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those     characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and     thus reveal the source code of scripts, run arbitrary PHP code on the server, etc. (CVE-2024-4577)

  - **PHP version 8.3.12** (26 Sep 2024)  **CGI:**  * Fixed bug     [GHSA-p99j-rfp4-xqvq](https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq) (Bypass of     CVE-2024-4577, Parameter Injection Vulnerability). (**CVE-2024-8926**) (nielsdos) * Fixed bug     [GHSA-94p6-54jq-9mwp](https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp)     (cgi.force_redirect configuration is bypassable due to the environment variable collision).
    (**CVE-2024-8927**) (nielsdos)  **Core:**  * Fixed bug [GH-15408](https://github.com/php/php-     src/issues/15408) (MSan false-positve on zend_max_execution_timer). (zeriyoshi) * Fixed bug     [GH-15515](https://github.com/php/php-src/issues/15515) (Configure error grep illegal option q). (Peter     Kokot) * Fixed bug [GH-15514](https://github.com/php/php-src/issues/15514) (Configure error: genif.sh:
    syntax error). (Peter Kokot) * Fixed bug [GH-15565](https://github.com/php/php-src/issues/15565)     (--disable-ipv6 during compilation produces error EAI_SYSTEM not found). (nielsdos) * Fixed bug     [GH-15587](https://github.com/php/php-src/issues/15587) (CRC32 API build error on arm 32-bit). (Bernd     Kuhls, Thomas Petazzoni) * Fixed bug [GH-15330](https://github.com/php/php-src/issues/15330) (Do not scan     generator frames more than once). (Arnaud) * Fixed uninitialized lineno in constant AST of internal enums.
    (ilutov)  **Curl:**  * FIxed bug [GH-15547](https://github.com/php/php-src/issues/15547)     (curl_multi_select overflow on timeout argument). (David Carlier)  **DOM:**  * Fixed bug     [GH-15551](https://github.com/php/php-src/issues/15551) (Segmentation fault (access null pointer) in     ext/dom/xml_common.h). (nielsdos) * Fixed bug [GH-15654](https://github.com/php/php-src/issues/15654)     (Signed integer overflow in ext/dom/nodelist.c). (nielsdos)  **Fileinfo:**  * Fixed bug     [GH-15752](https://github.com/php/php-src/issues/15752) (Incorrect error message for finfo_file with an     empty filename argument). (DanielEScherzer)  **FPM:**  * Fixed bug     [GHSA-865w-9rf3-2wh5](https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5) (Logs from     childrens may be altered). (**CVE-2024-9026**) (Jakub Zelenka)  **MySQLnd:**  * Fixed bug     [GH-15432](https://github.com/php/php-src/issues/15432) (Heap corruption when querying a vector). (cmb,     Kamil Tekiela)  **Opcache:**  * Fixed bug [GH-15661](https://github.com/php/php-src/issues/15661) (Access     null pointer in Zend/Optimizer/zend_inference.c). (nielsdos) * Fixed bug     [GH-15658](https://github.com/php/php-src/issues/15658) (Segmentation fault in Zend/zend_vm_execute.h).
    (nielsdos)  **SAPI:**  * Fixed bug [GHSA-9pqp-7h25-4f32](https://github.com/php/php-     src/security/advisories/GHSA-9pqp-7h25-4f32) (Erroneous parsing of multipart form data).
    (**CVE-2024-8925**) (Arnaud)  **Standard:**  * Fixed bug [GH-15552](https://github.com/php/php-     src/issues/15552) (Signed integer overflow in ext/standard/scanf.c). (cmb)  **Streams:**  * Fixed bug     [GH-15628](https://github.com/php/php-src/issues/15628) (php_stream_memory_get_buffer() not zero-     terminated). (cmb) (CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

PHP 8.3.x < 8.3.12 Multiple Vulnerabilities

critical Nessus Plugin ID 207821

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Nov 22, 2024, 4:32 PM IAVM reference Plugin Feed: 202411221632
Version 1.4 Oct 4, 2024, 4:02 PM New Plugin Feed: 202410041602
Version 1.3 Oct 2, 2024, 4:10 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410021610
Version 1.2 Sep 27, 2024, 3:31 PM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202409271531
Version 1.1 Sep 27, 2024, 3:23 AM New Plugin Feed: 202409270323