CVE-2024-2757

PHP mb_encode_mimeheader runs endlessly for some inputs

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami libphp

[{"type":"SEMVER","events":[{"introduced":"8.3.0"},{"fixed":"8.3.5"}]}]

Bitnami php-min

[{"type":"SEMVER","events":[{"introduced":"8.3.0"},{"fixed":"8.3.5"}]}]

Bitnami php

[{"type":"SEMVER","events":[{"introduced":"8.3.0"},{"fixed":"8.3.5"}]}]

Références

advisory github.com
advisory security.netapp.com
web openwall.com
web nvd.nist.gov
web lists.fedoraproject.org