修正バージョン
バージョンを確認する
php -r 'echo PHP_VERSION;'7.1 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2026-109619 | RCE via stale global state | 9.2 | KEV | 100.0% | 2026-10-21 |
| CVE-2019-11043 | Underflow in PHP-FPM can lead to RCE | 8.7 | KEV | 99.8% | 2019-10-28 |
| CVE-2024-3566 | Command injection vulnerability in programing languages on Microsoft Windows operating system. | 9.8 | — | 2024-04-10 | |
| CVE-2016-1283 | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R... | 9.8 | — | 2016-01-03 | |
| CVE-2018-7584 | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-ba... | 9.8 | — | 2018-03-02 | |
| CVE-2017-9120 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application cr... | 9.8 | — | 2018-08-03 | |
| CVE-2017-5340 | Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array... | 9.8 | — | 2017-01-11 | |
| CVE-2016-7479 | In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serial... | 9.8 | — | 2017-01-12 | |
| CVE-2016-10160 | Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before... | 9.8 | — | 2017-01-25 | |
| CVE-2019-9020 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... | 9.8 | — | 2019-02-23 | |
| CVE-2019-9021 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... | 9.8 | — | 2019-02-23 | |
| CVE-2019-9023 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... | 9.8 | — | 2019-02-23 | |
| CVE-2017-8923 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string... | 9.8 | — | 2017-05-13 | |
| CVE-2017-9119 | The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of servi... | 9.8 | — | 2017-05-22 | |
| CVE-2017-9224 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 9.8 | — | 2017-05-25 | |
| CVE-2017-9225 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 9.8 | — | 2017-05-25 | |
| CVE-2019-9641 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... | 9.8 | — | 2019-03-09 | |
| CVE-2017-9226 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 9.8 | — | 2017-05-25 | |
| CVE-2017-9227 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 9.8 | — | 2017-05-25 | |
| CVE-2017-9228 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 9.8 | — | 2017-05-25 | |
| CVE-2019-13224 | A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause inf... | 9.8 | — | 2019-07-10 | |
| CVE-2017-11362 | In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the lo... | 9.8 | — | 2017-07-17 | |
| CVE-2017-12932 | ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use af... | 9.8 | — | 2017-08-18 | |
| CVE-2017-12933 | The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21,... | 9.8 | — | 2017-08-18 | |
| CVE-2015-8866 | ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each t... | 9.6 | — | 2016-05-22 | |
| CVE-2017-11147 | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying mali... | 9.1 | — | 2017-07-10 | |
| CVE-2018-10549 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... | 8.8 | — | 2018-04-30 | |
| CVE-2019-6977 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolorm... | 8.8 | — | 2019-01-27 | |
| CVE-2019-9675 | An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar... | 8.1 | — | 2019-03-11 | |
| CVE-2017-11628 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini... | 7.8 | — | 2017-07-26 | |
| CVE-2017-16642 | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_mer... | 7.5 | — | 2017-11-08 | |
| CVE-2018-10546 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... | 7.5 | — | 2018-04-30 | |
| CVE-2018-10548 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... | 7.5 | — | 2018-04-30 | |
| CVE-2017-9118 | PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. | 7.5 | — | 2018-08-03 | |
| CVE-2018-14883 | An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8... | 7.5 | — | 2018-08-03 | |
| CVE-2018-14884 | An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriate... | 7.5 | — | 2018-08-03 | |
| CVE-2018-15132 | An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7... | 7.5 | — | 2018-08-08 | |
| CVE-2018-19395 | ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL po... | 7.5 | — | 2018-11-21 | |
| CVE-2018-19396 | ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (appli... | 7.5 | — | 2018-11-21 | |
| CVE-2018-19518 | University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launche... | 7.5 | — | 2018-11-25 | |
| CVE-2016-10158 | The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x b... | 7.5 | — | 2017-01-25 | |
| CVE-2016-10159 | Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before... | 7.5 | — | 2017-01-25 | |
| CVE-2018-19935 | ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL... | 7.5 | — | 2018-12-07 | |
| CVE-2016-10161 | The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and... | 7.5 | — | 2017-01-25 | |
| CVE-2018-20783 | In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in P... | 7.5 | — | 2019-02-22 | |
| CVE-2016-10162 | The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows... | 7.5 | — | 2017-01-25 | |
| CVE-2019-9022 | An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record... | 7.5 | — | 2019-02-23 | |
| CVE-2017-6441 | The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service... | 7.5 | — | 2017-04-03 | |
| CVE-2017-7963 | The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause... | 7.5 | — | 2017-04-20 | |
| CVE-2019-9024 | An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... | 7.5 | — | 2019-02-23 | |
| CVE-2019-9637 | An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rena... | 7.5 | — | 2019-03-09 | |
| CVE-2019-9638 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... | 7.5 | — | 2019-03-09 | |
| CVE-2019-9639 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... | 7.5 | — | 2019-03-09 | |
| CVE-2019-9640 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... | 7.5 | — | 2019-03-09 | |
| CVE-2017-9229 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP... | 7.5 | — | 2017-05-25 | |
| CVE-2017-11142 | In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumptio... | 7.5 | — | 2017-07-10 | |
| CVE-2017-11144 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did no... | 7.5 | — | 2017-07-10 | |
| CVE-2017-11145 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meri... | 7.5 | — | 2017-07-10 | |
| CVE-2017-12934 | ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use afte... | 7.5 | — | 2017-08-18 | |
| CVE-2017-7272 | PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argu... | 7.4 | — | 2017-03-28 | |
| CVE-2022-31629 | $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities | 6.5 | — | 2022-09-29 | |
| CVE-2015-9253 | An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm ma... | 6.5 | — | 2018-02-20 | |
| CVE-2017-7890 | The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as us... | 6.5 | — | 2017-08-03 | |
| CVE-2022-4900 | Potential buffer overflow in php_cli_server_startup_workers | 6.2 | — | 2023-11-03 | |
| CVE-2018-5712 | An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1... | 6.1 | — | 2018-01-16 | |
| CVE-2018-10547 | An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.... | 6.1 | — | 2018-04-30 | |
| CVE-2018-17082 | The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10... | 6.1 | — | 2018-09-17 | |
| CVE-2018-5711 | gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x b... | 5.5 | — | 2018-01-16 | |
| CVE-2018-14851 | exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.2... | 5.5 | — | 2018-08-03 | |
| CVE-2019-11034 | Heap over-read in PHP EXIF extension | 4.8 | — | 2019-04-19 | |
| CVE-2019-11035 | Heap over-read in PHP EXIF extension | 4.8 | — | 2019-04-19 | |
| CVE-2019-11036 | Heap over-read in PHP EXIF extension | 4.8 | — | 2019-05-04 | |
| CVE-2019-11040 | Heap buffer overflow in EXIF extension | 4.8 | — | 2019-06-19 | |
| CVE-2019-11041 | heap-buffer-overflow on exif_scan_thumbnail in EXIF extension | 4.8 | — | 2019-08-10 | |
| CVE-2019-11042 | heap-buffer-overflow on exif_process_user_comment in EXIF extension | 4.8 | — | 2019-08-10 | |
| CVE-2018-10545 | An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4... | 4.7 | — | 2018-04-30 | |
| CVE-2019-11039 | Out-of-bounds read in iconv.c | 4.2 | — | 2019-06-19 | |
| CVE-2019-11038 | Uninitialized read in gdImageCreateFromXbm | 3.1 | — | 2019-06-19 | |
| CVE-2022-31628 | phar wrapper can occur dos when using quine gzip file | 2.3 | — | 2022-09-29 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。