Red Hat Enterprise Linux 9/php

Red Hat · Package

14 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
php: potential buffer overflow in php_cli_server_startup_workersCVE-2022-4900	Red Hat Enterprise Linux 6/php Red Hat Enterprise Linux 7/php	Red Hat	Low	No fix reported	Not recorded
php: potential exposure to Marvin attack via unsafe implementation of RSA decryption APICVE-2024-2408	Red Hat Enterprise Linux 6/php Red Hat Enterprise Linux 7/php	Red Hat	Medium	No fix reported	Not recorded
php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixCVE-2025-6491	Red Hat Enterprise Linux 10/php Red Hat Enterprise Linux 6/php	Red Hat	Medium	No fix reported	Not recorded
php: pgsql extension does not check for errors during escapingCVE-2025-1735	Red Hat Enterprise Linux 10/php Red Hat Enterprise Linux 6/php	Red Hat	Medium	No fix reported	Not recorded
php: PHP Hostname Null Character VulnerabilityCVE-2025-1220	Red Hat Enterprise Linux 10/php Red Hat Enterprise Linux 6/php	Red Hat	Low	No fix reported	Not recorded
php: php: Out-of-bounds read via empty HTTP redirect Location headerCVE-2026-93682	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: PHP: Archive entry injection via integer overflow in TAR parserCVE-2026-6103	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: PHP: Denial of Service via heap buffer overflow in SOAP clientCVE-2025-14181	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: php: Credential disclosure via cross-origin HTTP redirectsCVE-2026-91766	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parserCVE-2025-1218	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Low	No fix reported	Not recorded
php: php: Information disclosure via crafted TLS server certificateCVE-2026-91767	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: php: Server impersonation via Common Name fallback in TLS verificationCVE-2026-91769	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: php: Access control bypass via partial IPv6 address comparisonCVE-2026-91768	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded
php: php: Information disclosure via out-of-bounds read in stream filtersCVE-2026-92842	Red Hat Enterprise Linux 10/php8.4 Red Hat Enterprise Linux 10/php	Red Hat	Medium	No fix reported	Not recorded