CVE-2024-8932 - Vulnerability Details - OpenCVE

ReportizFlow

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Php Group	Php

No data.

No data.

References

Link	Providers
https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff
https://nvd.nist.gov/vuln/detail/CVE-2024-8932
https://www.cve.org/CVERecord?id=CVE-2024-8932

History

Sat, 23 Nov 2024 14:15:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2024-8932 https://www.cve.org/CVERecord?id=CVE-2024-8932
Metrics	threat_severity `None`	threat_severity `Moderate`

Fri, 22 Nov 2024 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Php Group Php Group php
CPEs		cpe:2.3:a:php_group:php::::::::
Vendors & Products		Php Group Php Group php
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 22 Nov 2024 06:15:00 +0000

Type	Values Removed	Values Added
Description		In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
Title		OOB access in ldap_escape
Weaknesses		CWE-787
References		https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: php

Published: 2024-11-22T06:03:29.764Z

Updated: 2024-11-27T04:55:17.998Z

Reserved: 2024-09-17T04:50:14.830Z

Link: CVE-2024-8932

Vulnrichment

Updated: 2024-11-22T17:41:17.061Z

NVD

Status : Received

Published: 2024-11-22T06:15:20.197

Modified: 2024-11-22T06:15:20.197

Link: CVE-2024-8932

Redhat

Severity : Moderate

Publid Date: 2024-11-22T06:03:29Z

Links: CVE-2024-8932 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-8932", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "state": "PUBLISHED", "assignerShortName": "php", "dateReserved": "2024-09-17T04:50:14.830Z", "datePublished": "2024-11-22T06:03:29.764Z", "dateUpdated": "2024-11-27T04:55:17.998Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "modules": ["ldap"], "platforms": ["32 bit"], "product": "PHP", "vendor": "PHP Group", "versions": [{"lessThan": "8.1.31", "status": "affected", "version": "8.1.*", "versionType": "semver"}, {"lessThan": "8.2.26", "status": "affected", "version": "8.2.*", "versionType": "semver"}, {"lessThan": "8.3.14", "status": "affected", "version": "8.3.*", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Yiheng Cao"}], "datePublic": "2024-11-21T18:15:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to </span><code>ldap_escape()</code><span style=\"background-color: rgb(255, 255, 255);\"> function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</span><br>"}], "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2024-11-22T06:03:29.764Z"}, "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff"}], "source": {"advisory": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4", "discovery": "EXTERNAL"}, "title": "OOB access in ldap_escape", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "php_group", "product": "php", "cpes": ["cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.1.0", "status": "affected", "lessThan": "8.1.31", "versionType": "custom"}, {"version": "8.2.0", "status": "affected", "lessThan": "8.2.26", "versionType": "custom"}, {"version": "8.3.0", "status": "affected", "lessThan": "8.3.14", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-26T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-8932"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T04:55:17.998Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-8932", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-22T17:41:35.928721Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"], "vendor": "php_group", "product": "php", "versions": [{"status": "affected", "version": "8.1.0", "lessThan": "8.1.31", "versionType": "custom"}, {"status": "affected", "version": "8.2.0", "lessThan": "8.2.26", "versionType": "custom"}, {"status": "affected", "version": "8.3.0", "lessThan": "8.3.14", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-22T17:41:17.061Z"}}], "cna": {"title": "OOB access in ldap_escape", "source": {"advisory": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Yiheng Cao"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "PHP Group", "modules": ["ldap"], "product": "PHP", "versions": [{"status": "affected", "version": "8.1.*", "lessThan": "8.1.31", "versionType": "semver"}, {"status": "affected", "version": "8.2.*", "lessThan": "8.2.26", "versionType": "semver"}, {"status": "affected", "version": "8.3.*", "lessThan": "8.3.14", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "affected"}], "datePublic": "2024-11-21T18:15:00.000Z", "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to </span><code>ldap_escape()</code><span style=\"background-color: rgb(255, 255, 255);\"> function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2024-11-22T06:03:29.764Z"}}}, "cveMetadata": {"cveId": "CVE-2024-8932", "state": "PUBLISHED", "dateUpdated": "2024-11-27T04:55:17.998Z", "dateReserved": "2024-09-17T04:50:14.830Z", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "datePublished": "2024-11-22T06:03:29.764Z", "assignerShortName": "php"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "php: OOB access in ldap_escape", "id": "2327961", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327961"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "status": "draft"}, "cwe": "CWE-787", "details": ["In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.", "A security issue was found in PHP. Uncontrolled long string inputs to the `ldap_escape()`\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write. This issue may lead to an application crash or other undefined or unexpected results."], "name": "CVE-2024-8932", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "php", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "php:7.4/php", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "php:8.0/php", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "php:8.2/php", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "php", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "php:8.1/php", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "php:8.2/php", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-11-22T06:03:29Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-8932\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-8932\nhttps://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff"], "statement": "This vulnerability does not affect the PHP versions as shipped with Red Hat Enterprise Linux 8 and 9 as this flaw affects 32-bit versions of PHP which are not supported by Red Hat.", "threat_severity": "Moderate"}