Most recent entries from all

CVE-2024-11236 — Integer overflow in the firebird and dblib quoters causing OOB writes

Affected: PHP Group PHP, php_group php

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

USN-7153-1 — php7.0, php7.2 vulnerability

Affected: Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2

It was discovered that PHP incorrectly handled long string inputs in two database drivers. An attacker could possibly use this issue to write files in locations they would not normally have access to. (CVE-2024-11236)