Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-93682 →

DEBIAN-CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server controls whether the client is sent to the host root or to the current directory.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 php8.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.34-1~deb12u1"}]}]

Debian:13 php8.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.26-1~deb13u1"}]}]

Debian:14 php8.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.26-1"}]}]

Références

advisory security-tracker.debian.org