IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.3Orta

CVE-2025-1861Stream HTTP wrapper truncates redirect location to 1024 bytes

PHP Group PHP Yayım: (1 yıl önce)

Açıklama

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.

Zayıflık türü (CWE): CWE-131

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
netapp ontap 9
PHP Group PHP 8.1.* – < 8.1.32, 8.2.* – < 8.2.28, 8.3.* – < 8.3.19, 8.4.* – < 8.4.5

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (5)
  • cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 8.1.0 < 8.1.31
  • cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 8.2.0 < 8.2.26
  • cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 8.3.0 < 8.3.14
  • cpe:2.3:a:php:php:*:*:*:*:*:*:*:* ≥ 8.4.0 < 8.4.5
  • cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*

Aynı üründe son açıklar — PHP

9.2Kritik
CVE-2026-109619 KEV

RCE via stale global state

PHP Group PHP; Siemens AMIS TS; Siemens AX4; Siemens blueplanet 360 NX3 M6 WM OD IISX

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

100%EPSS
9.2Kritik
CVE-2026-109618 KEV

RCE via OOM corruption

PHP Group PHP; Siemens AMIS TS; Siemens AX4; Siemens blueplanet 360 NX3 M6 WM OD IISX

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

100%EPSS