Report feedback

Allows an unauthenticated remote attacker, on 32-bit systems, due to insufficient input validation in the Lightweight Directory Access Protocol (LDAP) extension, to write outside the bounds of allocated memory [7].

The vulnerability is present in product:

• php; >=8.1, <8.1.31; >=8.2, <8.2.26; >=8.3, <8.3.14;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2024-8932 at cve.org, NVD
• CWE-787: Out-of-bounds Write at cwe.mitre.org

The vulnerability was publicly disclosed 23. 11. 2024.

Allows an unauthenticated remote attacker, on 32-bit systems, due to insufficient input validation in the pdo_firebird and pdo_dblib extensions of the PHP Data Objects (PDO) module, to write outside the bounds of allocated memory [8][9].

The vulnerability is present in product:

• php; >=8.1, <8.1.31; >=8.2, <8.2.26; >=8.3, <8.3.14;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2024-11236 at cve.org, NVD
• CWE-787: Out-of-bounds Write at cwe.mitre.org

The vulnerability was publicly disclosed 23. 11. 2024.

Allows an authenticated remote attacker, using a fake MySQL server or by manipulating network packets and sending a specially crafted SQL query, to exploit insufficient input validation in the function "php_mysqlnd_rset_field_read" and obtain data from the heap of the PHP client, including responses to previous SQL queries or data of other users served by the same PHP-FPM pool [10][11]. A PoC for the vulnerability can be found at [11].

The vulnerability is present in product:

• php; >=8.1, <8.1.31; >=8.2, <8.2.26; >=8.3, <8.3.14;

CVSS: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

More information:

• CVE-2024-8929 at cve.org, NVD
• CWE-125: Out-of-bounds Read at cwe.mitre.org

The vulnerability was publicly disclosed 24. 11. 2024.

Allows an unauthenticated remote attacker, due to insufficient validation of heap boundaries when processing input data using the PHP filter "convert.quoted-printable-decode", to obtain data without authorization or to carry out a DoS attack [12][13]. A PoC for the vulnerability can be found at [13].

The vulnerability is present in product:

• php; >=8.1, <8.1.31; >=8.2, <8.2.26; >=8.3, <8.3.14;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

More information:

• CVE-2024-11233 at cve.org, NVD
• CWE-122: Heap-based Buffer Overflow at cwe.mitre.org

The vulnerability was publicly disclosed 23. 11. 2023.

Allows an unauthenticated remote attacker, by sending specially crafted HTTP requests when using PHP streams with the "proxy" configuration and the "request_fulluri=true" parameter, to carry out an SSRF attack or to modify request headers, including sensitive headers such as "Authorization", "Cookie", "Origin" or "Referer". A PoC for the vulnerability can be found at [14].

The vulnerability is present in product:

• php; >=8.1, <8.1.31; >=8.2, <8.2.26; >=8.3, <8.3.14;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

More information:

• CVE-2024-11234 at cve.org, NVD
• CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 23. 11. 2024.