Multiple vulnerabilities in PHP, including remote code execution, security restriction bypass, denial of service, and data manipulation, affect systems running PHP versions prior to 8.5.9, 8.4.24, 8.3.33, and 8.2.33. The vendor has released fixed versions PHP 8.5.9, PHP 8.4.24, PHP 8.3.33, and PHP 8.2.33 to address these issues.
Multiple vulnerabilities were identified in PHP. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, security restriction bypass, denial of service condition, sensitive information disclosure and data manipulation on the targeted system. Impact Remote Code Execution Security Restriction Bypass Data Manipulation Denial of Service Information Disclosure System / Technologies affected PHP version prior to 8.5.9 PHP version prior to 8.4.24 PHP version prior to 8.3.33 PHP version prior to 8.2.33 Solutions Before installation of the software, please visit the software manufacturer web-site for more details. The vendor has issued a fix: PHP 8.5.9 PHP 8.4.24 PHP 8.3.33 PHP 8.2.33