![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.153495 |
Category: | General |
Title: | PHP < 8.1.31, 8.2.x < 8.2.26, 8.3.x < 8.3.14 Multiple Vulnerabilities - Linux |
Summary: | PHP is prone to multiple vulnerabilities. |
Description: | Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-8929: Leak partial content of the heap through heap buffer over-read - CVE-2024-8932: OOB access in ldap_escape - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs - CVE-2024-11236: Integer overflow in the firebird/dblib quoter causing OOB writes - No CVE: Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface Affected Software/OS: PHP versions prior to 8.1.31, 8.2.x prior to 8.2.26 and 8.3.x prior to 8.3.14. Solution: Update to version 8.1.31, 8.2.26, 8.3.14 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2024-8929 Common Vulnerability Exposure (CVE) ID: CVE-2024-8932 Common Vulnerability Exposure (CVE) ID: CVE-2024-11233 Common Vulnerability Exposure (CVE) ID: CVE-2024-11234 Common Vulnerability Exposure (CVE) ID: CVE-2024-11236 |
Copyright | Copyright (C) 2024 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |