{"id":123467,"date":"2025-04-11T03:05:07","date_gmt":"2025-04-11T01:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php"},"modified":"2025-04-11T03:05:07","modified_gmt":"2025-04-11T01:05:07","slug":"opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php","title":{"rendered":"Megjelent a PHP k\u00f3dalap biztons\u00e1gi auditj\u00e1nak eredm\u00e9nyei","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Az OSTIF (Open Source Technology Improvement Fund), amelynek c\u00e9lja a ny\u00edlt projektek biztons\u00e1g\u00e1nak meger\u0151s\u00edt\u00e9se, bejelentette a PHP projekt alap k\u00f3dalapj\u00e1nak f\u00fcggetlen audit\u00e1l\u00e1s\u00e1nak befejez\u00e9s\u00e9t. A munk\u00e1t a francia QuarksLab v\u00e9gezte, amelyet kor\u00e1bban az OpenVPN, VeraCrypt \u00e9s OpenSSL projektek audit\u00e1l\u00e1s\u00e1ra is bevontak. Az ellen\u0151rz\u00e9s sor\u00e1n 27 probl\u00e9m\u00e1t azonos\u00edtottak, amelyekb\u0151l 17 biztons\u00e1gi, m\u00edg 10 inform\u00e1ci\u00f3s jelleg\u0171. K\u00e9t probl\u00e9m\u00e1t vesz\u00e9lyes sebezhet\u0151s\u00e9geknek, hatot k\u00f6zepes szint\u0171 vesz\u00e9lyess\u00e9g\u0171nek, kilencet pedig nem vesz\u00e9lyesnek min\u0151s\u00edtettek.    <\/p>\n<p>Az azonos\u00edtott sebezhet\u0151s\u00e9gek k\u00f6z\u00fcl:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-8928 \u2014 mem\u00f3ria s\u00e9r\u00fcl\u00e9st okoz\u00f3 sebezhet\u0151s\u00e9g a sz\u0171r\u0151kezel\u0151ben.\n<li class=\"l\"> CVE-2024-8929 \u2014 sebezhet\u0151s\u00e9g a MySQL illeszt\u0151programban, amely mem\u00f3ria tartalom sziv\u00e1rg\u00e1s\u00e1t okozza a puffert\u00fall\u00e9p\u00e9si adatok olvas\u00e1sa miatt. Csatlakoz\u00e1s egy t\u00e1mad\u00f3 \u00e1ltal ir\u00e1ny\u00edtott rendszerhez. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/dts-shicago\/\"   title=\"szerverhez\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2949\">szerverhez<\/a> PHP-FPM probl\u00e9m\u00e1ja, amely lehet\u0151v\u00e9 teszi a DoS t\u00e1mad\u00e1st a CPU t\u00falzott terhel\u00e9s\u00e9vel.\n<li class=\"l\"> H\u00e1rom k\u00f6zepes vesz\u00e9lyess\u00e9g\u0171 probl\u00e9ma az OpenSSL k\u00f6r\u00e9 \u00e9p\u00edtett r\u00e9tegben, amelyek a kulcsok igaz\u00edt\u00e1s\u00e1val, a vektor \u00fajra\u00edr\u00e1s\u00e1val \u00e9s a DH param\u00e9terek ellen\u0151rz\u00e9s\u00e9nek hi\u00e1ny\u00e1val kapcsolatosak. Ezen k\u00edv\u00fcl 4 nem vesz\u00e9lyes probl\u00e9ma tal\u00e1lhat\u00f3 az OpenSSL r\u00e9tegben.\n<li class=\"l\"> Eg\u00e9sz sz\u00e1mok t\u00falcsordul\u00e1sa a php.ini elemz\u00e9sekor.\n<li class=\"l\"> CVE-2024-9026 \u2014 sebezhet\u0151s\u00e9g a PHP-FPM-ben, amely lehet\u0151v\u00e9 teszi karakterek elt\u00e1vol\u00edt\u00e1s\u00e1t a napl\u00f3ba \u00edrt \u00fczenetekb\u0151l.\n<li class=\"l\"> CVE-2024-9026 \u2014 sebezhet\u0151s\u00e9g a PHP-FPM-ben, amely lehet\u0151v\u00e9 teszi, hogy karaktereket t\u00e1vol\u00edtsanak el a napl\u00f3\u00fczenetekb\u0151l.\n<li class=\"l\"> CVE-2024-8925 \u2014 multipart \u0171rlapokkal kapcsolatos feldolgoz\u00e1si probl\u00e9ma, amely az adatok helytelen kezel\u00e9s\u00e9hez vezet.    <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63049\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP. \u0420\u0430\u0431\u043e\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 QuarksLab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 OpenVPN, VeraCrypt \u0438 OpenSSL. \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 27 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 17 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 10 \u043d\u043e\u0441\u044f\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123467","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b PHP | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-11T01:05:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-04-11T01:05:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Megjelent a PHP k\u00f3dalap biztons\u00e1gi auditj\u00e1nak eredm\u00e9nyei | ProHoster","description":"\ud83e\udd47Megjelent a PHP k\u00f3dalap biztons\u00e1gi auditj\u00e1nak eredm\u00e9nyei | ProHoster","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b PHP | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-php","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-11T01:05:07+00:00","article:modified_time":"2025-04-11T01:05:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123467","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:08:59","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:09:19","updated":"2026-02-09 22:08:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/123467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=123467"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/123467\/revisions"}],"predecessor-version":[{"id":160230,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/123467\/revisions\/160230"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=123467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=123467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=123467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}