REDHAT-BUG-2355917: Medium severity PHP PHP vulnerability

Q: What is the severity of REDHAT-BUG-2355917?

The severity of REDHAT-BUG-2355917 is considered important due to potential misinterpretation of HTTP response headers.

Q: How do I fix REDHAT-BUG-2355917?

To fix REDHAT-BUG-2355917, update PHP to version 8.1.32, 8.2.28, 8.3.19, or 8.4.5 or later depending on your installed version.

Q: What versions of PHP are affected by REDHAT-BUG-2355917?

Versions of PHP affected by REDHAT-BUG-2355917 include 8.1.0 to 8.1.31, 8.2.0 to 8.2.27, 8.3.0 to 8.3.18, and 8.4.0 to 8.4.4.

Q: What type of vulnerability is REDHAT-BUG-2355917?

REDHAT-BUG-2355917 is a vulnerability related to incorrect parsing of folded HTTP response headers.

Q: Could REDHAT-BUG-2355917 affect my application's performance?

Yes, REDHAT-BUG-2355917 could potentially affect your application's performance by leading to incorrect handling of HTTP responses.

Published Mar 29, 2025

Updated

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

Affected Software

4 affected components

PHP PHP>=8.1.0, <8.1.32

PHP PHP>=8.2.0, <8.2.28

PHP PHP>=8.3.0, <8.3.19

PHP PHP>=8.4.0, <8.4.5

Event History

Mar 29, 2025

Data Sourced

via Red Hat·06:01 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2355917?

The severity of REDHAT-BUG-2355917 is considered important due to potential misinterpretation of HTTP response headers.

How do I fix REDHAT-BUG-2355917?

To fix REDHAT-BUG-2355917, update PHP to version 8.1.32, 8.2.28, 8.3.19, or 8.4.5 or later depending on your installed version.

What versions of PHP are affected by REDHAT-BUG-2355917?