CVE-2024-11236
Integer overflow in the firebird and dblib quoters causing OOB writes
概要
Integer overflow in the firebird and dblib quoters causing OOB writes
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2024-11236 php7.4 修正版: 7.4.33-1+deb11u7
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory github.com
- web lists.debian.org