[UPDATE] [hoch] PHP: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-22 07:20 UTC
  • Importiert: 2026-05-27 07:51 UTC
  • Quelle-ID: cert_bund
  • uid_hash: f75f1081c0cec6af04513664688f8b9cb66fdb11afa38f49896a3f27ddaa666e

Inhalt

Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Denial of Service oder Server-Side Request-Forgery Angriffe durchzuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-1220

HIGH

LOW

3.7

2025-07-13

CVE-2025-1735

HIGH

MEDIUM

5.9

2025-07-13

CVE-2025-6491

HIGH

MEDIUM

5.9

2025-07-13

Externe Referenzen

Bezeichnung Typ CVE Quelle

Oracle Linux Security Advisory ELSA-2025-23309 vom 2025-12-20

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-1412 vom 2026-01-29

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2025:23309 vom 2025-12-18

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:1409 vom 2026-01-27

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:1412 vom 2026-01-27

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:2470 vom 2026-02-10

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2PHP8.1-2025-007 vom 2025-08-05

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2PHP8.2-2025-008 vom 2025-08-05

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-2C344545BF vom 2025-07-04

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-DA047483D8 vom 2025-07-04

EXTERNAL - wid_csaf

cPanel Change Log vom 2025-07-16

EXTERNAL - wid_csaf

cPanel Change Log vom 2025-07-16

EXTERNAL - wid_csaf

cPanel Change Log vom 2025-07-16

EXTERNAL - wid_csaf

cPanel Change Log vom 2025-07-16

EXTERNAL - wid_csaf

cPanel Change Log vom 2025-07-16

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2025:23309 vom 2025-12-19

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:1409 vom 2026-01-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:1412 vom 2026-01-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:2470 vom 2026-02-11

EXTERNAL - wid_csaf

GitHub PHP Security Advisory GHSA-3cr5-j632-f35r vom 2025-07-03 mit PoC

EXTERNAL - wid_csaf

GitHub PHP Security Advisory GHSA-453j-q27h-5p8x vom 2025-07-03 mit PoC

EXTERNAL - wid_csaf

GitHub PHP Security Advisory GHSA-hrwm-9436-5mv3 vom 2025-07-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-1409 vom 2026-01-29

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-2470 vom 2026-02-12

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4254 vom 2025-07-27

EXTERNAL - wid_csaf

Debian Security Advisory DSA-5967 vom 2025-07-29

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15340-1 vom 2025-07-12

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02463-1 vom 2025-07-22

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02462-1 vom 2025-07-22

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02474-1 vom 2025-07-23

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02473-1 vom 2025-07-23

EXTERNAL - wid_csaf

PHP 8.1.33 Release vom 2025-07-03

EXTERNAL - wid_csaf

PHP 8.2.29 Release vom 2025-07-03

EXTERNAL - wid_csaf

PHP 8.3.23 Release vom 2025-07-03

EXTERNAL - wid_csaf

PHP 8.4.10 Release vom 2025-07-03

EXTERNAL - wid_csaf

XEROX Security Advisory XRX25-018 vom 2025-11-18

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7648-1 vom 2025-07-17

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7648-2 vom 2025-08-22

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-7648-3 vom 2025-09-04

EXTERNAL - wid_csaf

PHP 8 Changelog vom 2025-07-03

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss