InfraGuard
ログイン 今すぐ試す 今すぐ購入

PHP 7.2 の脆弱性

PHP の 7.2 系列に影響する既知のCVEは 64 件です。

2 KEV9.8 最大CVSS2020-11-30 にサポート終了

修正バージョン

7.2.17.2.47.2.57.2.87.2.107.2.137.2.147.2.167.2.177.2.187.2.197.2.217.2.237.2.247.2.267.2.277.2.297.2.307.2.317.2.337.2.34
バージョンを確認するphp -r 'echo PHP_VERSION;'

7.2 に影響するCVE

CVE タイトル CVSS 悪用 EPSS 公開日
CVE-2026-109619 RCE via stale global state 9.2 KEV 100.0% 2026-10-21
CVE-2019-11043 Underflow in PHP-FPM can lead to RCE 8.7 KEV 99.8% 2019-10-28
CVE-2022-37454 The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer ove... 9.8 — 2022-10-21
CVE-2024-3566 Command injection vulnerability in programing languages on Microsoft Windows operating system. 9.8 — 2024-04-10
CVE-2018-7584 In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-ba... 9.8 — 2018-03-02
CVE-2018-12882 exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free... 9.8 — 2018-06-26
CVE-2019-9020 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... 9.8 — 2019-02-23
CVE-2019-9021 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... 9.8 — 2019-02-23
CVE-2019-9023 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... 9.8 — 2019-02-23
CVE-2017-8923 The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string... 9.8 — 2017-05-13
CVE-2019-9641 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... 9.8 — 2019-03-09
CVE-2019-13224 A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause inf... 9.8 — 2019-07-10
CVE-2015-8866 ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each t... 9.6 — 2016-05-22
CVE-2018-10549 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... 8.8 — 2018-04-30
CVE-2019-6977 gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolorm... 8.8 — 2019-01-27
CVE-2018-10546 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... 7.5 — 2018-04-30
CVE-2018-10548 An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5... 7.5 — 2018-04-30
CVE-2018-14883 An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8... 7.5 — 2018-08-03
CVE-2018-14884 An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriate... 7.5 — 2018-08-03
CVE-2018-15132 An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7... 7.5 — 2018-08-08
CVE-2018-19518 University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launche... 7.5 — 2018-11-25
CVE-2018-19935 ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL... 7.5 — 2018-12-07
CVE-2018-20783 In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in P... 7.5 — 2019-02-22
CVE-2019-9022 An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record... 7.5 — 2019-02-23
CVE-2019-9024 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1.... 7.5 — 2019-02-23
CVE-2019-9637 An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rena... 7.5 — 2019-03-09
CVE-2019-9638 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... 7.5 — 2019-03-09
CVE-2019-9639 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... 7.5 — 2019-03-09
CVE-2019-9640 An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.... 7.5 — 2019-03-09
CVE-2020-7062 Null Pointer Dereference in PHP Session Upload Progress 7.5 — 2020-02-28
CVE-2020-7067 OOB Read in urldecode() 7.5 — 2020-04-28
CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities 6.5 — 2022-09-29
CVE-2015-9253 An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm ma... 6.5 — 2018-02-20
CVE-2020-7059 OOB read in php_strip_tags_ex 6.5 — 2020-02-10
CVE-2020-7060 global buffer-overflow in mbfl_filt_conv_big5_wchar 6.5 — 2020-02-10
CVE-2020-7061 heap-buffer-overflow in phar_extract_file 6.5 — 2020-02-28
CVE-2020-7064 Use-of-uninitialized-value in exif 6.5 — 2020-04-01
CVE-2022-4900 Potential buffer overflow in php_cli_server_startup_workers 6.2 — 2023-11-03
CVE-2018-5712 An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1... 6.1 — 2018-01-16
CVE-2018-10547 An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.... 6.1 — 2018-04-30
CVE-2018-17082 The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10... 6.1 — 2018-09-17
CVE-2018-5711 gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x b... 5.5 — 2018-01-16
CVE-2018-14851 exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.2... 5.5 — 2018-08-03
CVE-2020-7063 Files added to tar with Phar::buildFromIterator have all-access permissions 5.5 — 2020-02-28
CVE-2020-7069 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV 5.4 — 2020-10-02
CVE-2020-7066 get_headers() silently truncates after a null byte 5.3 — 2020-04-01
CVE-2019-11048 Temporary files are not cleaned after OOM when parsing HTTP request data 5.3 — 2020-05-20
CVE-2019-11034 Heap over-read in PHP EXIF extension 4.8 — 2019-04-19
CVE-2019-11035 Heap over-read in PHP EXIF extension 4.8 — 2019-04-19
CVE-2019-11036 Heap over-read in PHP EXIF extension 4.8 — 2019-05-04
CVE-2019-11040 Heap buffer overflow in EXIF extension 4.8 — 2019-06-19
CVE-2019-11041 heap-buffer-overflow on exif_scan_thumbnail in EXIF extension 4.8 — 2019-08-10
CVE-2019-11042 heap-buffer-overflow on exif_process_user_comment in EXIF extension 4.8 — 2019-08-10
CVE-2019-11047 Heap-buffer-overflow READ in exif 4.8 — 2019-12-23
CVE-2019-11050 Use-after-free in exif parsing under memory sanitizer 4.8 — 2019-12-23
CVE-2020-7068 Use of freed hash key in the phar_parse_zipfile function 4.8 — 2020-09-10
CVE-2018-10545 An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4... 4.7 — 2018-04-30
CVE-2020-7070 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent 4.3 — 2020-10-02
CVE-2019-11039 Out-of-bounds read in iconv.c 4.2 — 2019-06-19
CVE-2019-11044 link() silently truncates after a null byte on Windows 3.7 — 2019-12-23
CVE-2019-11045 DirectoryIterator class silently truncates after a null byte 3.7 — 2019-12-23
CVE-2019-11046 Buffer underflow in bc_shift_addsub 3.7 — 2019-12-23
CVE-2019-11038 Uninitialized read in gdImageCreateFromXbm 3.1 — 2019-06-19
CVE-2022-31628 phar wrapper can occur dos when using quine gzip file 2.3 — 2022-09-29

自社サーバーでこれらのバージョンを追跡

InfraGuard はすべてのサーバーからインストール済みソフトウェアのバージョンを収集し、既知の脆弱性があるものを通知します。セルフホスト型なので、データがネットワーク外に出ることはありません。

ライブデモを試す 今すぐ購入

悪用された脆弱性の週刊ダイジェスト

セルフホスト型サーバーに関係する KEV の追加情報を週1回お届けします。それ以外のメールは送りません。

データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。