Azure Linux 3.0 Security Update: php (CVE-2025-1217)
Discription

image
The version of php installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1217 advisory. In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which May lead to misinterpreting the response and using incorrect headers, MIME types, etc. (CVE-2025-1217) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. File data…Read More

Back to Main

Subscribe for the latest news: