{"id":13009,"date":"2026-10-21T12:43:12","date_gmt":"2026-10-21T03:43:12","guid":{"rendered":"https:\/\/yorozu.cloudfree.jp\/wordpress\/?p=13009"},"modified":"2026-10-25T17:33:52","modified_gmt":"2026-10-25T08:33:52","slug":"php%e3%81%ae%e8%84%86%e5%bc%b1%e6%80%a7","status":"publish","type":"post","link":"https:\/\/yorozu.cloudfree.jp\/wordpress\/?p=13009","title":{"rendered":"PHP\u306e\u8106\u5f31\u6027"},"content":{"rendered":"\n

\uff11\uff0e\u767a\u8868\u6982\u8981<\/strong><\/h4>\n\n\n\n
\u4f55\u304c\u8d77\u304d\u305f
\u300010\/21\u3001PHP\u672c\u4f53\u306e\u91cd\u5927\u306a\u4e0d\u5177\u54082\u4ef6\u3092\u4fee\u6b63<\/td>		PHP=Web\u30b5\u30a4\u30c8\u306e\u88cf\u5074\u306e\u51e6\u7406\u306b\u4f7f\u3046\u8a00\u8a9e
\u554f\u984c\u306f\u3001PHP\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u30bd\u30d5\u30c8\u306e\u30e1\u30e2\u30ea\u7ba1\u7406\u306b\u3042\u3063\u305f

\u305d\u306e\uff11
\u3000\u30e1\u30e2\u30ea\u4e0d\u8db3\u306e\u5f8c\u51e6\u7406\u3067\u4e0d\u5b8c\u5168\u306a\u30c7\u30fc\u30bf\u3092\u4f7f\u3063\u3066\u3057\u307e\u3046

\u305d\u306e\uff12
\u3000\u4f7f\u3044\u7d42\u3048\u305f\u30e1\u30e2\u30ea\u3092\u6b21\u306e\u901a\u4fe1\u3067\u53c2\u7167\u3057\u3066\u3057\u307e\u3046<\/td><\/tr>
\u4f55\u304c\u5371\u967a
\u3000\u6761\u4ef6\u304c\u305d\u308d\u3046\u3068\u3001\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u3044\u306a\u3044\u76f8\u624b\u304b\u3089\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4e0d\u6b63\u306a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c<\/td>		\u88ab\u5bb3\u306e\u7bc4\u56f2\u306f\u3001PHP\u306b\u4e0e\u3048\u3089\u308c\u305f\u6a29\u9650\u306a\u3069\u3067\u5909\u308f\u308b
\u3000\u60c5\u5831\u6d41\u51fa
\u3000\u30b5\u30a4\u30c8\u6539\u3056\u3093
\u3000\u30b5\u30fc\u30d3\u30b9\u505c\u6b62<\/td><\/tr>
\u3069\u3093\u306a\u5bfe\u7b56\u3092\u3059\u308b?<\/td>\u30b5\u30fc\u30d0\u30fc\u4e0a\u306e PHP\u672c\u4f53\u3092\u66f4\u65b0
\u3000\u4fee\u6b63\u3092\u542b\u3080PHP\u3078\u5165\u308c\u66ff\u3048\u3001 \u7a3c\u50cd\u4e2d\u306ePHP\u306b\u3082\u53cd\u6620\u3055\u308c\u305f\u304b\u78ba\u8a8d

\u3059\u3067\u306b\u4fb5\u5165\u3055\u308c\u3066\u3044\u306a\u3044\u304b\u8abf\u67fb
\u3000\u901a\u4fe1\u306e\u8a18\u9332\u30fb\u4e0d\u5be9\u306a\u30d5\u30a1\u30a4\u30eb\u30fb \u60f3\u5b9a\u5916\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u78ba\u8a8d

WordPress\u672c\u4f53\u306e\u66f4\u65b0\u3060\u3051\u3067\u3001PHP\u3082\u76f4\u308b\u3068\u306f\u9650\u3089\u306a\u3044
\u66f4\u65b0\u3068\u8abf\u67fb\u306f\u4e26\u884c\u3057\u3066\u9032\u3081\u308b<\/td><\/tr>
\u7d9a\u5831\u3067\u4f55\u304c\u5206\u304b\u3063\u305f?
\u300010\/17
\u3000\u3000\u653b\u6483\u306e\u8a66\u884c\u3092\u89b3\u6e2c
\u300010\/21
\u3000\u3000PHP\u4fee\u6b63\u7248\u3092\u516c\u958b<\/td>		AWS\u304c\u3001\u4fee\u6b63\u516c\u958b4\u65e5\u524d\u306e\u653b\u6483\u306e\u8a66\u884c\u3092\u691c\u77e5\u7528\u30b7\u30b9\u30c6\u30e0\u3067\u78ba\u8a8d

\u653b\u6483\u306e\u8a66\u884c\u306e\u89b3\u6e2c\uff1d\u4fb5\u5165\u6210\u529f\u306e\u78ba\u8a8d\u3067\u306f\u306a\u3044

AWS\u306f\u3001\u5c11\u306a\u304f\u3068\u308210\/17\u304b\u3089\u306e\u8abf\u67fb\u3092\u63a8\u5968<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

\uff12\uff0e\u4ed5\u7d44\u307f\u3068\u5bfe\u7b56<\/strong><\/h4>\n\n\n\n
\u3069\u3053\u306b\u554f\u984c
\u3000\u30b5\u30fc\u30d0\u30fc\u3067\u52d5\u304fPHP\u672c\u4f53
\u3000PHP\u306f\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u30ed\u30b0\u30a4\u30f3\u30fb\u691c\u7d22\u30fb\u4fdd\u5b58\u306a\u3069\u3092\u51e6\u7406<\/td>		\u4eca\u56de\u306f\u5b9f\u884c\u74b0\u5883\u305d\u306e\u3082\u306e\u306e\u4e0d\u5177\u5408

Web\u304b\u3089\u306e\u901a\u4fe1\u3092\u51e6\u7406\u3059\u308bPHP\u304c\u5bfe\u8c61
\u3000\u4f8b:Apache\u3001PHP-FPM<\/td><\/tr>
\u539f\u56e0\u306f2\u3064
\u3000\u30e1\u30e2\u30ea\u7ba1\u7406\u306e\u4e0d\u5177\u5408<\/td>		CVE-2026-109616
\u3000\u30e1\u30e2\u30ea\u4e0d\u8db3\u6642\u306e\u5f8c\u51e6\u7406

\u3000\u51e6\u7406\u3092\u4e2d\u65ad
\u3000\u3000\u6e96\u5099\u9014\u4e2d\u306e\u30c7\u30fc\u30bf\u304c\u6b8b\u308b
\u3000\u3000\u7d42\u4e86\u51e6\u7406\u3067\u8aa4\u3063\u3066\u6271\u3046

CVE-2026-109619
\u3000\u53e4\u3044\u53c2\u7167\u304c\u6b8b\u308b

\u3000\u30e1\u30e2\u30ea\u3092\u89e3\u653e
\u3000\u3000\u53e4\u3044\u53c2\u7167\u304c\u6b8b\u308b
\u3000\u3000\u6b21\u306e\u901a\u4fe1\u3067\u4f7f\u3063\u3066\u3057\u307e\u3046<\/td><\/tr>
\u4f55\u304c\u5371\u967a?
\u3000\u30ed\u30b0\u30a4\u30f3\u524d\u3067\u3082\u653b\u6483\u304c\u6210\u7acb\u3059\u308b\u5834\u5408\u304c\u3042\u308b<\/td>		\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4e0d\u6b63\u306a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c
\u3000\u60c5\u5831\u6d41\u51fa
\u3000\u30b5\u30a4\u30c8\u306e\u6539\u3056\u3093
\u3000\u30b5\u30fc\u30d3\u30b9\u505c\u6b62

\u3000\u5f71\u97ff\u306fPHP\u306e\u5b9f\u884c\u6a29\u9650\u306e\u7bc4\u56f2
\u3000\u6210\u7acb\u6761\u4ef6\u306f\u74b0\u5883\u3084\u8a2d\u5b9a\u3067\u7570\u306a\u308b<\/td><\/tr>
\u904b\u55b6\u8005\u306e\u5bfe\u5fdc
\u3000PHP\u672c\u4f53\u306e\u4fee\u6b63\u3092\u9069\u7528<\/td>		\u8a2d\u5b9a\u5909\u66f4\u3060\u3051\u3067\u306f\u5b8c\u5168\u306b\u9632\u3052\u306a\u3044
\u3000\u4f7f\u7528\u4e2d\u306ePHP\u3068\u63d0\u4f9b\u5143\u306e\u5bfe\u5fdc\u72b6\u6cc1\u3092\u78ba\u8a8d
\u3000\u4fee\u6b63\u7248\u3078\u66f4\u65b0
\u3000\u7a3c\u50cd\u4e2d\u306ePHP\u3092\u518d\u8d77\u52d5\u3057\u52d5\u4f5c\u3068\u30ed\u30b0\u3092\u78ba\u8a8d

\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u306f\u63d0\u4f9b\u5143\u306e\u6848\u5185\u3078<\/td><\/tr>
\u516c\u5f0f\u306e\u4fee\u6b63\u7248
\u30008.2.35
\u30008.3.36
\u30008.4.27
\u30008.5.12<\/td>		OS\u63d0\u4f9b\u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u3001\u63d0\u4f9b\u5143\u306e\u4fee\u6b63\u60c5\u5831\u3082\u78ba\u8a8d<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

\uff13\uff0e\u5177\u4f53\u7684\u306a\u5185\u5bb9<\/strong><\/h4>\n\n\n\n
\n
CVE-2026-109618
\u30e1\u30e2\u30ea\u4e0d\u8db3\u6642\u306e\u4e0d\u6b63\u306a\u72b6\u614b\u51e6\u7406<\/td>		CVE-2026-109619
\u89e3\u653e\u6e08\u307f\u30e1\u30e2\u30ea\u306e\u518d\u5229\u7528 \/ Use-After-Free<\/td><\/tr>
\u30e1\u30e2\u30ea\u5236\u9650\uff08OOM: Out Of Memory\uff09\u3084bailout\uff08\u30a8\u30e9\u30fc\u306b\u3088\u308b\u51e6\u7406\u306e\u4e2d\u65ad\uff09\u304c\u767a\u751f\u3057\u305f\u969b\u306e\u30a8\u30e9\u30fc\u51e6\u7406\u306b\u6b20\u9665\u304c\u3042\u308b\u8106\u5f31\u6027<\/td>\u30ea\u30af\u30a8\u30b9\u30c8\u9593\u3067\u53e4\u3044\u53c2\u7167\u304c\u6b8b\u308a\u3001\u3059\u3067\u306b\u89e3\u653e\u3055\u308c\u305f\uff08Free\u3055\u308c\u305f\uff09\u30e1\u30e2\u30ea\u9818\u57df\u306b\u518d\u3073\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3057\u307e\u3046\u8106\u5f31\u6027\uff08Use-After-Free\uff09<\/td><\/tr>
\u653b\u6483\u306e\u6d41\u308c:

1. \u653b\u6483\u8005\u304c\u7d30\u5de5\u3057\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1

2. \u51e6\u7406\u9014\u4e2d\u3067\u30e1\u30e2\u30ea\u4e0d\u8db3\uff08OOM\uff09\u304c\u767a\u751f

3. \u901a\u5e38\u306f\u305d\u3053\u3067\u5f37\u5236\u7d42\u4e86\u3059\u308b\u306f\u305a\u304c\u3001\u5185\u90e8\u72b6\u614b\u304c\u4e0d\u5b8c\u5168\u306a\uff08\u521d\u671f\u5316\u9014\u4e2d\u306e\uff09\u30c7\u30fc\u30bf\u306e\u307e\u307e\u51e6\u7406\u3092\u7d99\u7d9a

4. \u305d\u306e\u4e0d\u5b8c\u5168\u306a\u30c7\u30fc\u30bf\u304c\u6709\u52b9\u306a\u3082\u306e\u3068\u3057\u3066\u6271\u308f\u308c\u3001\u6761\u4ef6\u6b21\u7b2c\u3067RCE\uff08\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u306b\u3064\u306a\u304c\u308b<\/td>		\u653b\u6483\u306e\u6d41\u308c:

1. \u30ea\u30af\u30a8\u30b9\u30c8A\uff08\u30a8\u30e9\u30fc\u7b49\uff09\u3067\u30e1\u30e2\u30ea\u304c\u89e3\u653e

2. \u89e3\u653e\u3055\u308c\u305f\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001\u53e4\u3044\u53c2\u7167\u304c\u30e1\u30e2\u30ea\u4e0a\u306b\u6b8b\u5b58\u3059\u308b

3. \u7d9a\u304f\u30ea\u30af\u30a8\u30b9\u30c8B\u306e\u51e6\u7406\u5185\u3067\u3001\u305d\u306e\u6b8b\u3063\u305f\u53e4\u3044\u30e1\u30e2\u30ea\u9818\u57df\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3057\u307e\u3046\uff08\u30e1\u30e2\u30ea\u7834\u58ca\uff09

4. \u7d50\u679c\u3068\u3057\u3066\u3001\u9060\u9694\u304b\u3089RCE\uff08\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u304c\u6210\u7acb\u3059\u308b\u5371\u967a\u6027\u304c\u3042\u308b
<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\"\"<\/figure>\n<\/div>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

\uff14\uff0e\u5bfe\u5fdc\u7b56<\/strong><\/h4>\n\n\n\n
\u4eca\u56de\u306e\u554f\u984c
\u3000PHP\u306b\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f<\/td>		\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001 \u4e0d\u6b63\u306a\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308a\u30db\u30fc\u30e0\u30da\u30fc\u30b8\u306e\u6539\u3056\u3093\u3084\u30c7\u30fc\u30bf\u306e\u6f0f\u3048\u3044\u306a\u3069\u306e\u88ab\u5bb3\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b<\/td><\/tr>
\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306e\u5bfe\u5fdc
\u3000\u591a\u304f\u306e\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u304c\u7dca\u6025\u30d0\u30c3\u30c1\u3092\u9069\u7528\u3059\u308b<\/td>		\u591a\u304f\u306e\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u3067\u306f\u3001 \u4eca\u56de\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u4fee\u6b63 \u3092\u9069\u7528\u3057\u3001 \u30b5\u30a4\u30c8\u306e\u8868\u793a\u3092\u518d\u958b\u3057\u3066\u3044\u308b<\/td><\/tr>
\u5fc5\u8981\u306a\u5bfe\u7b56
\u3000\u4eca\u56de\u306e\u4ef6\u3092\u53d7\u3051\u3066\u3001\u4e3b\u306b2\u3064\u306e\u5bfe\u7b56\u304c\u5fc5\u8981<\/td>		PHP\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u306e\u9069\u7528
\u3000\u4eca\u56de\u767a\u898b\u3055\u308c\u305f\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u4fee\u6b63
\u3000\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u5074\u3067\u884c\u308f\u308c\u308b

PHP\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7
\u3000WordPress\u306a\u3069\u3067\u53e4\u3044PHP\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001 \u4eca\u5f8c\u306e\u5b89\u5168\u6027\u306e\u305f\u3081\u306b\u3001\u516c\u5f0f\u30b5\u30dd\u30fc\u30c8\u671f\u9593\u5185\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u306e\u66f4\u65b0\u304c\u304a\u3059\u3059\u3081<\/td><\/tr>
PHP\u306e\u5bfe\u5fdc\u72b6\u6cc1\u306b\u3064\u3044\u3066
\u3000\u53e4\u3044PHP\u3078\u306e\u5bfe\u5fdc\u306f\u3001\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306b\u3088\u308b<\/td>		\u4eca\u56de\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u306f\u3001\u591a\u304f\u306e\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u3067\u9069\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001 \u516c\u5f0f\u30b5\u30dd\u30fc\u30c8\u304c\u7d42\u4e86\u3057\u305f\u53e4\u3044PHP\u306b\u3064\u3044\u3066\u306f\u3001 \u5bfe\u5fdc\u65b9\u91dd\u3084\u4fee\u6b63\u7bc4\u56f2\u304c\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306b\u3088\u3063\u3066\u7570\u306a\u308b

\u305d\u306e\u305f\u3081\u3001\u53e4\u3044PHP\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u4f1a\u793e\u306e\u5bfe\u5fdc\u72b6\u6cc1\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u304c\u5927\u5207

\u30d0\u30fc\u30b8\u30e7\u30f3\u3068\u30b5\u30dd\u30fc\u30c8\u72b6\u6cc1
\u3000PHP 7.4
\u3000PHP 8.0
\u3000PHP 8.1
\u3000PHP 8.2
\u3000PHP 8.3
\u3000PHP 8.4
\u3000PHP 8.5
\u3000\u3000PHP 8.3\u4ee5\u4e0a\u304c\u304a\u3059\u3059\u3081<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

\u30fbPHP\u306e\u8106\u5f31\u6027<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54],"tags":[20],"class_list":["post-13009","post","type-post","status-publish","format-standard","hentry","category-99_","tag-security"],"_links":{"self":[{"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/13009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13009"}],"version-history":[{"count":9,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/13009\/revisions"}],"predecessor-version":[{"id":13028,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/13009\/revisions\/13028"}],"wp:attachment":[{"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/yorozu.cloudfree.jp\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}