REDHAT-BUG-2356042: Medium severity PHP PHP vulnerability
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2356042?
The severity of REDHAT-BUG-2356042 is considered high due to its potential to allow acceptance of invalid headers by applications.
How do I fix REDHAT-BUG-2356042?
To fix REDHAT-BUG-2356042, upgrade PHP to a version later than 8.1.32, 8.2.28, 8.3.19, or 8.4.5.
What versions are affected by REDHAT-BUG-2356042?
REDHAT-BUG-2356042 affects PHP versions 8.1.0 to 8.1.31, 8.2.0 to 8.2.27, 8.3.0 to 8.3.18, and 8.4.0 to 8.4.4.
What impact does REDHAT-BUG-2356042 have on applications?
REDHAT-BUG-2356042 can lead applications to erroneously accept headers that lack a colon, potentially causing application misbehavior or security issues.
How can I determine if my PHP installation is vulnerable to REDHAT-BUG-2356042?
To determine if your PHP installation is vulnerable to REDHAT-BUG-2356042, check the installed version against the affected version ranges.