29/4/2024

USN-6757-1: PHP vulnerabilities

First published: Mon Apr 29 2024(Updated: )

It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-4900) It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to cookie by pass. (CVE-2024-2756) It was discovered that PHP incorrectly handled some passwords. An attacker could possibly use this issue to cause an account takeover attack. (CVE-2024-3096)

Affected Software	Affected Version	How to fix
All of
ubuntu/libapache2-mod-php8.1	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/php8.1	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/php8.1-cgi	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/php8.1-cli	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/php8.1-fpm	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/php8.1-xml	<8.1.2-1ubuntu2.16	8.1.2-1ubuntu2.16
Ubuntu Ubuntu	=22.04
All of
ubuntu/libapache2-mod-php7.4	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/php7.4	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/php7.4-cgi	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/php7.4-cli	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/php7.4-fpm	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/php7.4-xml	<7.4.3-4ubuntu2.21	7.4.3-4ubuntu2.21
Ubuntu Ubuntu	=20.04
All of
ubuntu/libapache2-mod-php7.2	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/php7.2	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/php7.2-cgi	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/php7.2-cli	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/php7.2-fpm	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/php7.2-xml	<7.2.24-0ubuntu0.18.04.17+esm3	7.2.24-0ubuntu0.18.04.17+esm3
Ubuntu Ubuntu	=18.04
All of
ubuntu/libapache2-mod-php7.0	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04
All of
ubuntu/php7.0	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04
All of
ubuntu/php7.0-cgi	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04
All of
ubuntu/php7.0-cli	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04
All of
ubuntu/php7.0-fpm	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04
All of
ubuntu/php7.0-xml	<7.0.33-0ubuntu0.16.04.16+esm9	7.0.33-0ubuntu0.16.04.16+esm9
Ubuntu Ubuntu	=16.04

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

agent/severity
agent/last-modified-date
agent/title
agent/type
agent/description
agent/softwarecombine
agent/first-publish-date
agent/event
collector/usn
source/Ubuntu
anchor-related/USN-6757-2
agent/software-canonical-lookup
agent/references
agent/tags
agent/trending
package-manager/ubuntu
vendor/ubuntu
canonical/ubuntu ubuntu
version/ubuntu ubuntu/22.04
version/ubuntu ubuntu/20.04
version/ubuntu ubuntu/18.04
version/ubuntu ubuntu/16.04

USN-6757-1: PHP vulnerabilities

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

Company

Resources

Contact