{"schemaVersion":3,"id":"USN-8936-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities\n\nIt was discovered that PHP did not properly validate the size of MySQL\nserver packets in the mysqlnd driver. A malicious server could possibly use\nthis issue to cause PHP to crash, resulting in a denial of service. This\nissue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2025-1218)\n\nIt was discovered that PHP incorrectly handled response buffer sizes in the\nSOAP HTTP client. A malicious server could possibly use this issue to cause\nPHP to crash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2025-14181)\n\nIt was discovered that PHP incorrectly handled certain TAR archive headers\nin the Phar extension. An attacker could possibly use this issue to inject\narbitrary files into a crafted archive. (CVE-2026-6103)\n\nIt was discovered that PHP did not limit recursion depth when parsing\ncertain SOAP requests. A remote attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. (CVE-2026-91765)\n\nIt was discovered that PHP incorrectly handled authentication headers when\nfollowing HTTP redirects. A remote attacker could possibly use this issue\nto obtain sensitive information. (CVE-2026-91766)\n\nIt was discovered that PHP incorrectly handled wildcard names in TLS server\ncertificates. A malicious server could possibly use this issue to cause PHP\nto crash, resulting in a denial of service. This issue did not affect\nUbuntu 14.04 LTS. (CVE-2026-91767)\n\nIt was discovered that PHP incorrectly validated IPv6 client addresses in\nthe FastCGI client access check. A remote attacker could possibly use this\nissue to bypass access restrictions. This issue did not affect Ubuntu 14.04\nLTS. (CVE-2026-91768)\n\nIt was discovered that PHP incorrectly performed TLS peer name\nverification. A remote attacker could possibly use this issue to\nimpersonate a trusted server. (CVE-2026-91769)\n\nIt was discovered that PHP incorrectly handled certain stream filter\noptions. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2026-92842)\n\nIt was discovered that PHP incorrectly handled empty Location headers when\nfollowing HTTP redirects. A malicious server could possibly use this issue\nto redirect the client to an unintended location. This issue did not affect\nUbuntu 14.04 LTS. (CVE-2026-93682)","dates":{"published":"2026-10-19T13:25:32.000Z","modified":"2026-10-20T17:02:24.827Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"php5","name":"php5","label":"php5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php5","purlType":"deb","versions":[{"text":"< 5.5.9+dfsg-1ubuntu4.29+esm17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.9+dfsg-1ubuntu4.29+esm17","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.0","name":"php7.0","label":"php7.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.0","purlType":"deb","versions":[{"text":"< 7.0.33-0ubuntu0.16.04.16+esm21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.33-0ubuntu0.16.04.16+esm21","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.2","name":"php7.2","label":"php7.2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.2","purlType":"deb","versions":[{"text":"< 7.2.24-0ubuntu0.18.04.17+esm13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.24-0ubuntu0.18.04.17+esm13","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.4","name":"php7.4","label":"php7.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.4","purlType":"deb","versions":[{"text":"< 7.4.3-4ubuntu2.29+esm4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.3-4ubuntu2.29+esm4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.1","name":"php8.1","label":"php8.1","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.1","purlType":"deb","versions":[{"text":"< 8.1.2-1ubuntu2.27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-1ubuntu2.27","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.3","name":"php8.3","label":"php8.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.3","purlType":"deb","versions":[{"text":"< 8.3.6-0ubuntu0.24.04.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.3.6-0ubuntu0.24.04.12","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.5","name":"php8.5","label":"php8.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.5","purlType":"deb","versions":[{"text":"< 8.5.9-0ubuntu2","noFixRecorded":false,"fixedIn":null},{"text":"< 8.5.4-0ubuntu1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.5.9-0ubuntu2 | < 8.5.4-0ubuntu1.4","eol":null,"hubHref":null}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8936-1","label":"ubuntu.com/security/notices/USN-8936-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-1218","label":"ubuntu.com/security/CVE-2025-1218","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-14181","label":"ubuntu.com/security/CVE-2025-14181","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-6103","label":"ubuntu.com/security/CVE-2026-6103","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-91765","label":"ubuntu.com/security/CVE-2026-91765","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-91766","label":"ubuntu.com/security/CVE-2026-91766","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-91767","label":"ubuntu.com/security/CVE-2026-91767","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-91768","label":"ubuntu.com/security/CVE-2026-91768","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-91769","label":"ubuntu.com/security/CVE-2026-91769","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-92842","label":"ubuntu.com/security/CVE-2026-92842","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-93682","label":"ubuntu.com/security/CVE-2026-93682","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-1218","CVE-2025-14181","CVE-2026-6103","CVE-2026-91765","CVE-2026-91766","CVE-2026-91767","CVE-2026-91768","CVE-2026-91769","CVE-2026-92842","CVE-2026-93682"],"downstream":[],"duplicates":[],"related":["CVE-2025-1218","CVE-2025-14181","CVE-2026-6103","CVE-2026-91765","CVE-2026-91766","CVE-2026-91767","CVE-2026-91768","CVE-2026-91769","CVE-2026-92842","CVE-2026-93682"]},"timeline":[{"kind":"published","date":"2026-10-19T13:25:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-20T17:02:24.827Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:44:43.383Z","stale":false,"partial":false}}