Vulnerability-Lookup

OESA-2024-2478 (CVE-2024-11233)

Vulnerability from osv_openeuler – Published: 2024-11-29 11:07 – Updated: 2026-08-06 11:07 – Source website

Summary

php security update

Details

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif

Security Fix(es):

(CVE-2024-11233)

(CVE-2024-11234)

(CVE-2024-11236)

(CVE-2024-8929)

(CVE-2024-8932)

Severity

9.8 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-11233	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-11234	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-11236	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-8929	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-8932	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "php-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-bcmath-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-cli-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-common-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-dba-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-dbg-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-debuginfo-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-debugsource-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-devel-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-embedded-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-enchant-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-ffi-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-fpm-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-gd-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-gmp-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-help-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-intl-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-ldap-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-mbstring-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-mysqlnd-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-odbc-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-opcache-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-pdo-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-pgsql-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-process-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-snmp-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-soap-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-sodium-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-tidy-8.0.30-7.oe2003sp4.aarch64.rpm",
          "php-xml-8.0.30-7.oe2003sp4.aarch64.rpm"
        ],
        "src": [
          "php-8.0.30-7.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "php-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-bcmath-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-cli-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-common-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-dba-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-dbg-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-debuginfo-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-debugsource-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-devel-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-embedded-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-enchant-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-ffi-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-fpm-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-gd-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-gmp-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-help-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-intl-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-ldap-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-mbstring-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-mysqlnd-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-odbc-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-opcache-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-pdo-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-pgsql-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-process-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-snmp-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-soap-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-sodium-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-tidy-8.0.30-7.oe2003sp4.x86_64.rpm",
          "php-xml-8.0.30-7.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "php",
        "purl": "pkg:rpm/openEuler/php\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.30-7.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "php-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-cli-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-common-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-dba-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-dbg-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-devel-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-embedded-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-enchant-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-ffi-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-fpm-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-gd-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-gmp-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-help-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-intl-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-ldap-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-odbc-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-opcache-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-pdo-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-process-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-snmp-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-soap-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-sodium-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-tidy-8.0.30-7.oe2203sp1.aarch64.rpm",
          "php-xml-8.0.30-7.oe2203sp1.aarch64.rpm"
        ],
        "src": [
          "php-8.0.30-7.oe2203sp1.src.rpm"
        ],
        "x86_64": [
          "php-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-cli-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-common-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-dba-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-dbg-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-devel-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-embedded-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-enchant-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-ffi-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-fpm-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-gd-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-gmp-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-help-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-intl-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-ldap-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-odbc-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-opcache-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-pdo-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-process-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-snmp-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-soap-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-sodium-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-tidy-8.0.30-7.oe2203sp1.x86_64.rpm",
          "php-xml-8.0.30-7.oe2203sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP1",
        "name": "php",
        "purl": "pkg:rpm/openEuler/php\u0026distro=openEuler-22.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.30-7.oe2203sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "php-8.3.14-1.oe2403.aarch64.rpm",
          "php-bcmath-8.3.14-1.oe2403.aarch64.rpm",
          "php-cli-8.3.14-1.oe2403.aarch64.rpm",
          "php-common-8.3.14-1.oe2403.aarch64.rpm",
          "php-dba-8.3.14-1.oe2403.aarch64.rpm",
          "php-dbg-8.3.14-1.oe2403.aarch64.rpm",
          "php-debuginfo-8.3.14-1.oe2403.aarch64.rpm",
          "php-debugsource-8.3.14-1.oe2403.aarch64.rpm",
          "php-devel-8.3.14-1.oe2403.aarch64.rpm",
          "php-embedded-8.3.14-1.oe2403.aarch64.rpm",
          "php-enchant-8.3.14-1.oe2403.aarch64.rpm",
          "php-ffi-8.3.14-1.oe2403.aarch64.rpm",
          "php-fpm-8.3.14-1.oe2403.aarch64.rpm",
          "php-gd-8.3.14-1.oe2403.aarch64.rpm",
          "php-gmp-8.3.14-1.oe2403.aarch64.rpm",
          "php-intl-8.3.14-1.oe2403.aarch64.rpm",
          "php-ldap-8.3.14-1.oe2403.aarch64.rpm",
          "php-mbstring-8.3.14-1.oe2403.aarch64.rpm",
          "php-mysqlnd-8.3.14-1.oe2403.aarch64.rpm",
          "php-odbc-8.3.14-1.oe2403.aarch64.rpm",
          "php-opcache-8.3.14-1.oe2403.aarch64.rpm",
          "php-pdo-8.3.14-1.oe2403.aarch64.rpm",
          "php-pgsql-8.3.14-1.oe2403.aarch64.rpm",
          "php-process-8.3.14-1.oe2403.aarch64.rpm",
          "php-snmp-8.3.14-1.oe2403.aarch64.rpm",
          "php-soap-8.3.14-1.oe2403.aarch64.rpm",
          "php-sodium-8.3.14-1.oe2403.aarch64.rpm",
          "php-tidy-8.3.14-1.oe2403.aarch64.rpm",
          "php-xml-8.3.14-1.oe2403.aarch64.rpm"
        ],
        "noarch": [
          "php-help-8.3.14-1.oe2403.noarch.rpm"
        ],
        "src": [
          "php-8.3.14-1.oe2403.src.rpm"
        ],
        "x86_64": [
          "php-8.3.14-1.oe2403.x86_64.rpm",
          "php-bcmath-8.3.14-1.oe2403.x86_64.rpm",
          "php-cli-8.3.14-1.oe2403.x86_64.rpm",
          "php-common-8.3.14-1.oe2403.x86_64.rpm",
          "php-dba-8.3.14-1.oe2403.x86_64.rpm",
          "php-dbg-8.3.14-1.oe2403.x86_64.rpm",
          "php-debuginfo-8.3.14-1.oe2403.x86_64.rpm",
          "php-debugsource-8.3.14-1.oe2403.x86_64.rpm",
          "php-devel-8.3.14-1.oe2403.x86_64.rpm",
          "php-embedded-8.3.14-1.oe2403.x86_64.rpm",
          "php-enchant-8.3.14-1.oe2403.x86_64.rpm",
          "php-ffi-8.3.14-1.oe2403.x86_64.rpm",
          "php-fpm-8.3.14-1.oe2403.x86_64.rpm",
          "php-gd-8.3.14-1.oe2403.x86_64.rpm",
          "php-gmp-8.3.14-1.oe2403.x86_64.rpm",
          "php-intl-8.3.14-1.oe2403.x86_64.rpm",
          "php-ldap-8.3.14-1.oe2403.x86_64.rpm",
          "php-mbstring-8.3.14-1.oe2403.x86_64.rpm",
          "php-mysqlnd-8.3.14-1.oe2403.x86_64.rpm",
          "php-odbc-8.3.14-1.oe2403.x86_64.rpm",
          "php-opcache-8.3.14-1.oe2403.x86_64.rpm",
          "php-pdo-8.3.14-1.oe2403.x86_64.rpm",
          "php-pgsql-8.3.14-1.oe2403.x86_64.rpm",
          "php-process-8.3.14-1.oe2403.x86_64.rpm",
          "php-snmp-8.3.14-1.oe2403.x86_64.rpm",
          "php-soap-8.3.14-1.oe2403.x86_64.rpm",
          "php-sodium-8.3.14-1.oe2403.x86_64.rpm",
          "php-tidy-8.3.14-1.oe2403.x86_64.rpm",
          "php-xml-8.3.14-1.oe2403.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS",
        "name": "php",
        "purl": "pkg:rpm/openEuler/php\u0026distro=openEuler-24.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.3.14-1.oe2403"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "php-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-cli-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-common-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-dba-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-dbg-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-devel-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-embedded-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-enchant-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-ffi-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-fpm-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-gd-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-gmp-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-help-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-intl-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-ldap-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-odbc-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-opcache-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-pdo-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-process-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-snmp-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-soap-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-sodium-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-tidy-8.0.30-7.oe2203sp4.aarch64.rpm",
          "php-xml-8.0.30-7.oe2203sp4.aarch64.rpm"
        ],
        "src": [
          "php-8.0.30-7.oe2203sp4.src.rpm"
        ],
        "x86_64": [
          "php-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-cli-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-common-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-dba-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-dbg-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-devel-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-embedded-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-enchant-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-ffi-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-fpm-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-gd-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-gmp-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-help-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-intl-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-ldap-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-odbc-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-opcache-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-pdo-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-process-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-snmp-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-soap-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-sodium-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-tidy-8.0.30-7.oe2203sp4.x86_64.rpm",
          "php-xml-8.0.30-7.oe2203sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP4",
        "name": "php",
        "purl": "pkg:rpm/openEuler/php\u0026distro=openEuler-22.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.30-7.oe2203sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "php-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-cli-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-common-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-dba-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-dbg-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-devel-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-embedded-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-enchant-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-ffi-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-fpm-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-gd-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-gmp-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-help-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-intl-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-ldap-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-odbc-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-opcache-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-pdo-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-process-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-snmp-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-soap-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-sodium-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-tidy-8.0.30-7.oe2203sp3.aarch64.rpm",
          "php-xml-8.0.30-7.oe2203sp3.aarch64.rpm"
        ],
        "src": [
          "php-8.0.30-7.oe2203sp3.src.rpm"
        ],
        "x86_64": [
          "php-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-bcmath-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-cli-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-common-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-dba-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-dbg-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-debuginfo-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-debugsource-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-devel-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-embedded-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-enchant-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-ffi-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-fpm-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-gd-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-gmp-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-help-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-intl-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-ldap-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-mbstring-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-mysqlnd-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-odbc-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-opcache-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-pdo-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-pgsql-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-process-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-snmp-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-soap-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-sodium-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-tidy-8.0.30-7.oe2203sp3.x86_64.rpm",
          "php-xml-8.0.30-7.oe2203sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP3",
        "name": "php",
        "purl": "pkg:rpm/openEuler/php\u0026distro=openEuler-22.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.30-7.oe2203sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Critical"
  },
  "details": "PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2024-11233)\r\n\r\n(CVE-2024-11234)\r\n\r\n(CVE-2024-11236)\r\n\r\n(CVE-2024-8929)\r\n\r\n(CVE-2024-8932)",
  "id": "OESA-2024-2478",
  "modified": "2026-08-06T11:07:57Z",
  "published": "2024-11-29T11:07:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2478"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11233"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11234"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11236"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8929"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8932"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "php security update",
  "upstream": [
    "CVE-2024-11233",
    "CVE-2024-11234",
    "CVE-2024-11236",
    "CVE-2024-8929",
    "CVE-2024-8932"
  ]
}

CVE-2024-11233 (GCVE-0-2024-11233)

Vulnerability from cvelistv5 – Published: 2024-11-24 01:08 – Updated: 2025-11-03 21:51

Title

Single byte overread with convert.quoted-printable-decode filter

Summary

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-24 12:32 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

php mitre root

References

3 references

URL	Tags
https://github.com/php/php-src/security/advisorie…
https://security.netapp.com/advisory/ntap-2024122…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
PHP Group	PHP	Affected: 8.1.* , < 8.1.31 (semver) Affected: 8.2.* , < 8.2.26 (semver) Affected: 8.3.* , < 8.3.14 (semver)
php_group	php	Affected: 8.1.0 , < 8.1.31 (custom) Affected: 8.2.0 , < 8.2.26 (custom) Affected: 8.3.0 , < 8.3.14 (custom) cpe:2.3:a:php_group:php::::::::

Date Public

2024-11-21 18:15

Credits

Frostb1te

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11233",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-24T12:32:59.087887Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-24T12:41:42.881Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:51:48.654Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20241220-0008/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "filters"
          ],
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "8.1.31",
              "status": "affected",
              "version": "8.1.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.26",
              "status": "affected",
              "version": "8.2.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.3.14",
              "status": "affected",
              "version": "8.3.*",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Frostb1te"
        }
      ],
      "datePublic": "2024-11-21T18:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in\u0026nbsp;\u003cspan style=\"background-color: var(--wht);\"\u003econvert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in\u00a0convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-24T01:08:28.663Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "url": "https://github.com/php/php-src/security/advisories/GHSA-r977-prxv-hc43"
        }
      ],
      "source": {
        "advisory": "https://github.com/php/php-src/security/advisories/GHSA-r977-prx",
        "discovery": "UNKNOWN"
      },
      "title": "Single byte overread with convert.quoted-printable-decode filter",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2024-11233",
    "datePublished": "2024-11-24T01:08:28.663Z",
    "dateReserved": "2024-11-15T06:22:38.785Z",
    "dateUpdated": "2025-11-03T21:51:48.654Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-11234 (GCVE-0-2024-11234)

Vulnerability from cvelistv5 – Published: 2024-11-24 00:57 – Updated: 2025-11-03 21:51

Title

Configuring a proxy in a stream context might allow for CRLF injection in URIs

Summary

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-24 12:32 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

php mitre root

References

3 references

URL	Tags
https://github.com/php/php-src/security/advisorie…
https://security.netapp.com/advisory/ntap-2024122…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
PHP Group	PHP	Affected: 8.1.* , < 8.1.31 (semver) Affected: 8.2.* , < 8.2.26 (semver) Affected: 8.3.* , < 8.3.14 (semver)
php_group	php	Affected: 8.1.0 , < 8.1.31 (custom) Affected: 8.2.0 , < 8.2.26 (custom) Affected: 8.3.0 , < 8.3.14 (custom) cpe:2.3:a:php_group:php::::::::

Date Public

2024-11-21 18:15

Credits

Lorenzo Leonardini

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-24T12:32:39.294616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-24T12:41:42.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:51:51.580Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20241220-0008/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "8.1.31",
              "status": "affected",
              "version": "8.1.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.26",
              "status": "affected",
              "version": "8.2.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.3.14",
              "status": "affected",
              "version": "8.3.*",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Lorenzo Leonardini"
        }
      ],
      "datePublic": "2024-11-21T18:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and \"request_fulluri\" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.\u0026nbsp;\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and \"request_fulluri\" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-24T00:57:39.349Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "url": "https://github.com/php/php-src/security/advisories/GHSA-c5f2-jwm7-mmq2"
        }
      ],
      "source": {
        "advisory": "https://github.com/php/php-src/security/advisories/GHSA-c5f2-jwm",
        "discovery": "EXTERNAL"
      },
      "title": "Configuring a proxy in a stream context might allow for CRLF injection in URIs",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2024-11234",
    "datePublished": "2024-11-24T00:57:39.349Z",
    "dateReserved": "2024-11-15T06:26:08.361Z",
    "dateUpdated": "2025-11-03T21:51:51.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-11236 (GCVE-0-2024-11236)

Vulnerability from cvelistv5 – Published: 2024-11-24 00:44 – Updated: 2025-11-03 21:51

Title

Integer overflow in the firebird and dblib quoters causing OOB writes

Summary

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-24 12:32 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

php mitre root

References

3 references

URL	Tags
https://github.com/php/php-src/security/advisorie…
https://security.netapp.com/advisory/ntap-2024122…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
PHP Group	PHP	Affected: 8.1.* , < 8.1.31 (semver) Affected: 8.2.* , < 8.2.26 (semver) Affected: 8.3.* , < 8.3.14 (semver)
php_group	php	Affected: 8.1.0 , < 8.1.31 (custom) Affected: 8.2.0 , < 8.2.26 (custom) Affected: 8.3.0 , < 8.3.14 (custom) cpe:2.3:a:php_group:php::::::::

Date Public

2024-11-22 06:15

Credits

Niels Dossche

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11236",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-24T12:32:23.996029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-24T12:41:42.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:51:54.520Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20241220-0008/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "pdo_firebird",
            "pdo_dblib"
          ],
          "platforms": [
            "32 bit"
          ],
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "8.1.31",
              "status": "affected",
              "version": "8.1.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.26",
              "status": "affected",
              "version": "8.2.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.3.14",
              "status": "affected",
              "version": "8.3.*",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Niels Dossche"
        }
      ],
      "datePublic": "2024-11-22T06:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to \u003c/span\u003e\u003ccode\u003eldap_escape()\u003c/code\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-24T00:51:28.805Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "url": "https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv"
        }
      ],
      "source": {
        "advisory": "https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84",
        "discovery": "INTERNAL"
      },
      "title": "Integer overflow in the firebird and dblib quoters causing OOB writes",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2024-11236",
    "datePublished": "2024-11-24T00:44:54.951Z",
    "dateReserved": "2024-11-15T06:27:40.425Z",
    "dateUpdated": "2025-11-03T21:51:54.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-8929 (GCVE-0-2024-8929)

Vulnerability from cvelistv5 – Published: 2024-11-22 06:15 – Updated: 2025-11-03 22:33

Title

Leak partial content of the heap through heap buffer over-read in mysqlnd

Summary

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-22 17:37 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

3 references

URL	Tags
https://github.com/php/php-src/security/advisorie…
https://security.netapp.com/advisory/ntap-2025011…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
PHP Group	PHP	Affected: 8.1.* , < 8.1.31 (semver) Affected: 8.2.* , < 8.2.24 (semver) Affected: 8.3.* , < 8.3.14 (semver)
php_group	php	Affected: 8.1.0 , < 8.1.31 (custom) Affected: 8.2.0 , < 8.2.24 (custom) Affected: 8.3.0 , < 8.3.14 (custom) cpe:2.3:a:php_group:php::::::::

Date Public

2024-11-21 18:15

Credits

Sébastien Rolland

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.24",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8929",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T17:37:12.386428Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T17:40:35.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:33:10.858Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250110-0008/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "mysqlnd"
          ],
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "8.1.31",
              "status": "affected",
              "version": "8.1.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.24",
              "status": "affected",
              "version": "8.2.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.3.14",
              "status": "affected",
              "version": "8.3.*",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "S\u00e9bastien Rolland"
        }
      ],
      "datePublic": "2024-11-21T18:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.\u0026nbsp;\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T06:15:29.643Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "url": "https://github.com/php/php-src/security/advisories/GHSA-h35g-vwh6-m678"
        }
      ],
      "source": {
        "advisory": "https://github.com/php/php-src/security/advisories/GHSA-h35g-vwh",
        "discovery": "EXTERNAL"
      },
      "title": "Leak partial content of the heap through heap buffer over-read in mysqlnd",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2024-8929",
    "datePublished": "2024-11-22T06:15:29.643Z",
    "dateReserved": "2024-09-17T04:17:06.982Z",
    "dateUpdated": "2025-11-03T22:33:10.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-8932 (GCVE-0-2024-8932)

Vulnerability from cvelistv5 – Published: 2024-11-22 06:03 – Updated: 2025-11-03 22:33

Title

OOB access in ldap_escape

Summary

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-26 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

php mitre root

References

3 references

URL	Tags
https://github.com/php/php-src/security/advisorie…
https://security.netapp.com/advisory/ntap-2025011…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
PHP Group	PHP	Affected: 8.1.* , < 8.1.31 (semver) Affected: 8.2.* , < 8.2.26 (semver) Affected: 8.3.* , < 8.3.14 (semver)
php_group	php	Affected: 8.1.0 , < 8.1.31 (custom) Affected: 8.2.0 , < 8.2.26 (custom) Affected: 8.3.0 , < 8.3.14 (custom) cpe:2.3:a:php_group:php::::::::

Date Public

2024-11-21 18:15

Credits

Yiheng Cao

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "php",
            "vendor": "php_group",
            "versions": [
              {
                "lessThan": "8.1.31",
                "status": "affected",
                "version": "8.1.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.2.26",
                "status": "affected",
                "version": "8.2.0",
                "versionType": "custom"
              },
              {
                "lessThan": "8.3.14",
                "status": "affected",
                "version": "8.3.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8932",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-26T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T04:55:17.998Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:33:12.327Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250110-0009/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "ldap"
          ],
          "platforms": [
            "32 bit"
          ],
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "8.1.31",
              "status": "affected",
              "version": "8.1.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.26",
              "status": "affected",
              "version": "8.2.*",
              "versionType": "semver"
            },
            {
              "lessThan": "8.3.14",
              "status": "affected",
              "version": "8.3.*",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Yiheng Cao"
        }
      ],
      "datePublic": "2024-11-21T18:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to \u003c/span\u003e\u003ccode\u003eldap_escape()\u003c/code\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T06:03:29.764Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "url": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff"
        }
      ],
      "source": {
        "advisory": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4",
        "discovery": "EXTERNAL"
      },
      "title": "OOB access in ldap_escape",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2024-8932",
    "datePublished": "2024-11-22T06:03:29.764Z",
    "dateReserved": "2024-09-17T04:50:14.830Z",
    "dateUpdated": "2025-11-03T22:33:12.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OESA-2024-2478 (CVE-2024-11233)

CVE-2024-11233 (GCVE-0-2024-11233)

CVE-2024-11234 (GCVE-0-2024-11234)

CVE-2024-11236 (GCVE-0-2024-11236)

CVE-2024-8929 (GCVE-0-2024-8929)

CVE-2024-8932 (GCVE-0-2024-8932)

Tags

Sightings

Nomenclature

Related by attack behaviour