{"schemaVersion":3,"id":"USN-7400-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"php7.4, php8.1, php8.3 vulnerabilities\n\nIt was discovered that PHP incorrectly handle certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. (CVE-2024-11235)\n\nIt was discovered that PHP incorrectly handle certain folded headers.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbritrary code. (CVE-2025-1217)\n\nIt was discovered that PHP incorrectly handled certain headers.\nAn attacker could possibly use this issue to expose sensitive information\nor execute arbitrary code. This issue only affected Ubuntu 22.04 LTS\nUbuntu 24.10, and Ubuntu 24.04 LTS. (CVE-2025-1219)\n\nIt was discovered that PHP incorrectly handle certain headers with invalid\nname and no colon. An attacker could possibly use this issue to confuse\napplications into accepting invalid headers causing code injection.\n(CVE-2025-1734)\n\nIt was discovered that PHP incorrectly handled certain headers.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 22.04 LTS, Ubuntu 24.10, and Ubuntu 24.04\nLTS. (CVE-2025-1736)\n\nIt was discovered that PHP incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive\ninformation. (CVE-2025-1861)","dates":{"published":"2025-03-31T19:36:15.000Z","modified":"2026-04-27T17:51:08.066Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"php7.4","name":"php7.4","label":"php7.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.4","purlType":"deb","versions":[{"text":"< 7.4.3-4ubuntu2.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.3-4ubuntu2.29","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.1","name":"php8.1","label":"php8.1","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.1","purlType":"deb","versions":[{"text":"< 8.1.2-1ubuntu2.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-1ubuntu2.21","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.3","name":"php8.3","label":"php8.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.3","purlType":"deb","versions":[{"text":"< 8.3.6-0ubuntu0.24.04.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.3.6-0ubuntu0.24.04.4","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7400-1","label":"ubuntu.com/security/notices/USN-7400-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-11235","label":"ubuntu.com/security/CVE-2024-11235","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-1217","label":"ubuntu.com/security/CVE-2025-1217","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-1219","label":"ubuntu.com/security/CVE-2025-1219","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-1734","label":"ubuntu.com/security/CVE-2025-1734","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-1736","label":"ubuntu.com/security/CVE-2025-1736","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-1861","label":"ubuntu.com/security/CVE-2025-1861","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-11235","CVE-2025-1217","CVE-2025-1219","CVE-2025-1734","CVE-2025-1736","CVE-2025-1861"],"downstream":[],"duplicates":[],"related":["CVE-2024-11235","CVE-2025-1217","CVE-2025-1219","CVE-2025-1734","CVE-2025-1736","CVE-2025-1861"]},"timeline":[{"kind":"published","date":"2025-03-31T19:36:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T17:51:08.066Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T09:50:04.723Z","stale":false,"partial":false}}