Skip to content
OpenAdvisories
Medium USN-6841-2 1 CVE

php7.0, php7.2 vulnerability

Published Sep 9, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-6841-1 fixed a vulnerability in PHP. This update provides the
corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that PHP could early return in the filter_var function
resulting in invalid user information being treated as valid user
information. An attacker could possibly use this issue to expose raw
user input information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS php7.0 7.0.33-0ubuntu0.16.04.16+esm11
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS php7.2 7.2.24-0ubuntu0.18.04.17+esm5

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-5458 EPSS 12%

    Filter bypass in filter_var (FILTER_VALIDATE_URL)

    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user infor…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-5458