PHP Releases Urgent Fixes For Two Dangerous Flaws

The PHP project asks administrators to update their servers after the discovery of two vulnerabilities that can lead to remote code execution. The alert concerns a language very present on the Web, but the 70% figure mentioned in the press does not correspond to the number of sites actually vulnerable. The PHP team released several security updates on October 22. Its warning leaves little room for doubt: “critical remote code execution vulnerabilities: update now” . Remote code execution, or RCE, can allow a hacker to run commands on a server without having legitimate access. The two main vulnerabilities affect the memory management and internal state of PHP. However, their exploitation depends on specific technical conditions.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cointribune.