USN-6757-2

Dashboard / Vulnerabilities / USN-6757-2

USN-6757-2

Summary: php7.4, php8.1, php8.2 vulnerabilities

Details: USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. This update fixes the problem. Original advisory details: It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-4900) It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to cookie by pass. (CVE-2024-2756) It was discovered that PHP incorrectly handled some passwords. An attacker could possibly use this issue to cause an account takeover attack. (CVE-2024-3096)

References: https://ubuntu.com/security/notices/USN-6757-2, https://ubuntu.com/security/CVE-2022-4900, https://ubuntu.com/security/CVE-2024-2756, https://ubuntu.com/security/CVE-2024-3096