CVE-2024-11236
Integer overflow in the firebird and dblib quoters causing OOB writes
Résumé
Integer overflow in the firebird and dblib quoters causing OOB writes
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.31"},{"introduced":"8.2.0"},{"fixed":"8.2.26"},{"introduced":"8.3.0"},{"fixed":"8.3.14"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-11236 php7.4 Corrigé dans: 7.4.33-1+deb11u7
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory github.com
- web lists.debian.org