CVE-2024-11236
Integer overflow in the firebird and dblib quoters causing OOB writes
Summary
Integer overflow in the firebird and dblib quoters causing OOB writes
Original description
The description as published by the source.
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-11236 php7.4 Fixed in: 7.4.33-1+deb11u7
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory github.com
- web lists.debian.org