Debian: CVE-2024-2756: php7.3, php7.4, php8.2 -安全更新

Debian: CVE-2024-2756: php7.3, php7.4, php8.2 -安全更新

Severity

4

CVSS

(AV: L /交流:米/非盟:N / C: P / I: P / A: P)

Published

04/17/2024

Created

04/17/2024

Added

04/17/2024

Modified

05/10/2024

描述

由于CVE-2022-31629 http://github的不完整修复.com/advisories/ghsa j32p——c43m - 486 j , 网络和同站攻击者可以在受害者的浏览器中设置标准的不安全cookie, PHP应用程序将其视为__Host-或__Secure- cookie. 

解决方案(年代)

• debian-upgrade-php7-3
• debian-upgrade-php7-4
• debian-upgrade-php8-2

参考文献

• http://attackerkb.com/topics/cve-2024-2756
• Cve - 2024-2756
• DSA-5660-1
• DSA-5661-1