Integer overflow in PHP - CVE-2024-11236

Vulnerability identifier: #VU100672

CSH Severity: High

CVSS v4 BT: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-11236

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the dblib and firebird quoters. A remote attacker can pass specially crafted input to the application, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

PHP
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
Fedora
Slackware Linux
Web and Scripting Module
openSUSE Leap
Ubuntu
openEuler
Anolis OS
Oracle Solaris
EasyApache
SecurityCenter
libphp7.0-embed (Ubuntu package)
php7.2 (Ubuntu package)
php7.2-common (Ubuntu package)
php7.2-dev (Ubuntu package)
php7.2-interbase (Ubuntu package)
php7.2-mysql (Ubuntu package)
php7.2-pgsql (Ubuntu package)
php7.2-sqlite3 (Ubuntu package)
libapache2-mod-php7.0 (Ubuntu package)
libapache2-mod-php7.2 (Ubuntu package)
php7.0 (Ubuntu package)
php7.0-common (Ubuntu package)
php7.0-dev (Ubuntu package)
php7.0-interbase (Ubuntu package)
php7.0-mysql (Ubuntu package)
php7.0-pgsql (Ubuntu package)
php7.0-sqlite3 (Ubuntu package)
libphp7.2-embed (Ubuntu package)
php7.4 (Ubuntu package)
libapache2-mod-php7.4 (Ubuntu package)
php7.4-ldap (Ubuntu package)
php7.4-cli (Ubuntu package)
php7.4-cgi (Ubuntu package)
php7.4-mysql (Ubuntu package)
php7.4-fpm (Ubuntu package)
php-extras
php-bcmath
php
php-ffi
php-cli
php-common
php-dba
php-dbg
php-debuginfo
php-devel
php-fpm
php-gd
php-gmp
php-help
php-intl
php-ldap
php-mbstring
php-mysqlnd
php-odbc
php-opcache
php-pdo
php-pgsql
php-debugsource
php-embedded
php-enchant
php-xml
php-tidy
php-sodium
php-soap
php-snmp
php-process
php8.1-enchant (Ubuntu package)
php8.1 (Ubuntu package)
php81
php-zip
php8.2 (Debian package)
php8-pdo
php8-test
php8-dba-debuginfo
php8-calendar-debuginfo
php8-readline
php8-shmop-debuginfo
php8-devel
php8-gmp-debuginfo
php8-fileinfo-debuginfo
php8-sodium
php8-fpm-debugsource
php8-exif-debuginfo
php8-mysql-debuginfo
php8-pcntl
php8-cli
php8-gd-debuginfo
php8-posix
php8-iconv
php8-fastcgi-debuginfo
php8-readline-debuginfo
php8-fastcgi-debugsource
php8-fpm-apache
php8-intl
php8-opcache
php8-zip-debuginfo
php8-sysvsem
php8-tidy-debuginfo
php8-ldap-debuginfo
php8-openssl
php8-embed
php8-mysql
php8-shmop
php8-embed-debuginfo
php8-curl-debuginfo
php8-sqlite
php8-pdo-debuginfo
php8-embed-debugsource
php8-ldap
php8-pgsql-debuginfo
php8-sysvmsg-debuginfo
php8-bz2-debuginfo
php8-ftp-debuginfo
php8-soap
apache2-mod_php8
php8-ffi
php8-enchant
php8-odbc-debuginfo
php8-fileinfo
php8-ffi-debuginfo
php8-phar
php8-opcache-debuginfo
php8-enchant-debuginfo
php8-fpm-debuginfo
php8-openssl-debuginfo
php8-ftp
php8-gd
php8-dom
php8-iconv-debuginfo
php8-gettext
php8-posix-debuginfo
php8-fastcgi
php8-calendar
php8-snmp-debuginfo
php8-dba
php8-tidy
php8-sysvsem-debuginfo
php8-gettext-debuginfo
php8-snmp
php8-odbc
php8-mbstring
php8-phar-debuginfo
php8-curl
php8-pcntl-debuginfo
php8-xsl-debuginfo
php8-gmp
php8-sockets-debuginfo
php8-mbstring-debuginfo
php8-bcmath-debuginfo
php8-ctype
php8-sysvshm
php8-zlib-debuginfo
php8-intl-debuginfo
php8-sockets
php8-soap-debuginfo
php8-tokenizer
php8-ctype-debuginfo
apache2-mod_php8-debugsource
php8-xmlreader-debuginfo
php8-zlib
php8-sodium-debuginfo
php8-debuginfo
php8-sqlite-debuginfo
php8-xmlwriter-debuginfo
php8-dom-debuginfo
php8-xsl
php8-xmlreader
php8-xmlwriter
php8-bcmath
php8-fpm
php8-debugsource
php8-exif
php8-cli-debuginfo
apache2-mod_php8-debuginfo
php8-zip
php8-tokenizer-debuginfo
php8-pgsql
php8-sysvshm-debuginfo
php8
php8-bz2
php8-sysvmsg
php8.3-mysql (Ubuntu package)
libapache2-mod-php8.3 (Ubuntu package)
php8.3-fpm (Ubuntu package)
php8.3 (Ubuntu package)
php8.3-cli (Ubuntu package)
php8.3-cgi (Ubuntu package)
libapache2-mod-php8.0 (Ubuntu package)
php8.1-mysql (Ubuntu package)
php8.1-fpm (Ubuntu package)
php8.1-cli (Ubuntu package)
php8.1-cgi (Ubuntu package)
libapache2-mod-php8.1 (Ubuntu package)

Install update from vendor's website.

PHP - addressed in versions 8.1.31, 8.2.26, 8.3.14
EasyApache - update to 4 2024-11-25
SecurityCenter - update to SC-202412.1
libphp7.0-embed (Ubuntu package) - update to Ubuntu Pro
php7.2 (Ubuntu package) - update to Ubuntu Pro
php7.2-common (Ubuntu package) - update to Ubuntu Pro
php7.2-dev (Ubuntu package) - update to Ubuntu Pro
php7.2-interbase (Ubuntu package) - update to Ubuntu Pro
php7.2-mysql (Ubuntu package) - update to Ubuntu Pro
php7.2-pgsql (Ubuntu package) - update to Ubuntu Pro
php7.2-sqlite3 (Ubuntu package) - update to Ubuntu Pro
libapache2-mod-php7.0 (Ubuntu package) - update to Ubuntu Pro
libapache2-mod-php7.2 (Ubuntu package) - update to Ubuntu Pro
php7.0 (Ubuntu package) - update to Ubuntu Pro
php7.0-common (Ubuntu package) - update to Ubuntu Pro
php7.0-dev (Ubuntu package) - update to Ubuntu Pro
php7.0-interbase (Ubuntu package) - update to Ubuntu Pro
php7.0-mysql (Ubuntu package) - update to Ubuntu Pro
php7.0-pgsql (Ubuntu package) - update to Ubuntu Pro
php7.0-sqlite3 (Ubuntu package) - update to Ubuntu Pro
libphp7.2-embed (Ubuntu package) - update to Ubuntu Pro
php7.4 (Ubuntu package) - update to 7.4.3-4ubuntu2.28
libapache2-mod-php7.4 (Ubuntu package) - addressed in versions 7.4.3-4ubuntu2.28, 8.1.2-1ubuntu2.20
php7.4-ldap (Ubuntu package) - update to 7.4.3-4ubuntu2.28
php7.4-cli (Ubuntu package) - update to 7.4.3-4ubuntu2.28
php7.4-cgi (Ubuntu package) - update to 7.4.3-4ubuntu2.28
php7.4-mysql (Ubuntu package) - update to 7.4.3-4ubuntu2.28
php7.4-fpm (Ubuntu package) - update to 7.4.3-4ubuntu2.28
php-extras - update to 8.0.30-2.el9
php-bcmath - update to 8.0.30-7
php - update to 8.0.30-7
php-ffi - update to 8.0.30-7
php-cli - update to 8.0.30-7
php-common - update to 8.0.30-7
php-dba - update to 8.0.30-7
php-dbg - update to 8.0.30-7
php-debuginfo - update to 8.0.30-7
php-devel - update to 8.0.30-7
php-fpm - update to 8.0.30-7
php-gd - update to 8.0.30-7
php-gmp - update to 8.0.30-7
php-help - update to 8.0.30-7
php-intl - update to 8.0.30-7
php-ldap - update to 8.0.30-7
php-mbstring - update to 8.0.30-7
php-mysqlnd - update to 8.0.30-7
php-odbc - update to 8.0.30-7
php-opcache - update to 8.0.30-7
php-pdo - update to 8.0.30-7
php-pgsql - update to 8.0.30-7
php-debugsource - update to 8.0.30-7
php-embedded - update to 8.0.30-7
php-enchant - update to 8.0.30-7
php-xml - update to 8.0.30-7
php-tidy - update to 8.0.30-7
php-sodium - update to 8.0.30-7
php-soap - update to 8.0.30-7
php-snmp - update to 8.0.30-7
php-process - update to 8.0.30-7
libapache2-mod-php8.0 (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1-mysql (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1-fpm (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1-enchant (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1-cli (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1-cgi (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php8.1 (Ubuntu package) - update to 8.1.2-1ubuntu2.20
libapache2-mod-php8.1 (Ubuntu package) - update to 8.1.2-1ubuntu2.20
php81 - update to 8.1.31
php-zip - update to 8.2.26-1
php-bcmath - update to 8.2.26-1
php-xml - update to 8.2.26-1
php-sodium - update to 8.2.26-1
php-soap - update to 8.2.26-1
php-snmp - update to 8.2.26-1
php-process - update to 8.2.26-1
php-pgsql - update to 8.2.26-1
php-pdo - update to 8.2.26-1
php-opcache - update to 8.2.26-1
php-odbc - update to 8.2.26-1
php-mysqlnd - update to 8.2.26-1
php-mbstring - update to 8.2.26-1
php-ldap - update to 8.2.26-1
php-gmp - update to 8.2.26-1
php-intl - update to 8.2.26-1
php - update to 8.2.26-1
php-cli - update to 8.2.26-1
php-common - update to 8.2.26-1
php-dba - update to 8.2.26-1
php-dbg - update to 8.2.26-1
php-embedded - update to 8.2.26-1
php-enchant - update to 8.2.26-1
php-ffi - update to 8.2.26-1
php-fpm - update to 8.2.26-1
php-gd - update to 8.2.26-1
php-devel - update to 8.2.26-1
php8.2 (Debian package) - update to 8.2.26-1~deb12u1
php8-pdo - update to 8.2.26-150600.3.9.1
php8-test - update to 8.2.26-150600.3.9.1
php8-dba-debuginfo - update to 8.2.26-150600.3.9.1
php8-calendar-debuginfo - update to 8.2.26-150600.3.9.1
php8-readline - update to 8.2.26-150600.3.9.1
php8-shmop-debuginfo - update to 8.2.26-150600.3.9.1
php8-devel - update to 8.2.26-150600.3.9.1
php8-gmp-debuginfo - update to 8.2.26-150600.3.9.1
php8-fileinfo-debuginfo - update to 8.2.26-150600.3.9.1
php8-sodium - update to 8.2.26-150600.3.9.1
php8-fpm-debugsource - update to 8.2.26-150600.3.9.1
php8-exif-debuginfo - update to 8.2.26-150600.3.9.1
php8-mysql-debuginfo - update to 8.2.26-150600.3.9.1
php8-pcntl - update to 8.2.26-150600.3.9.1
php8-cli - update to 8.2.26-150600.3.9.1
php8-gd-debuginfo - update to 8.2.26-150600.3.9.1
php8-posix - update to 8.2.26-150600.3.9.1
php8-iconv - update to 8.2.26-150600.3.9.1
php8-fastcgi-debuginfo - update to 8.2.26-150600.3.9.1
php8-readline-debuginfo - update to 8.2.26-150600.3.9.1
php8-fastcgi-debugsource - update to 8.2.26-150600.3.9.1
php8-fpm-apache - update to 8.2.26-150600.3.9.1
php8-intl - update to 8.2.26-150600.3.9.1
php8-opcache - update to 8.2.26-150600.3.9.1
php8-zip-debuginfo - update to 8.2.26-150600.3.9.1
php8-sysvsem - update to 8.2.26-150600.3.9.1
php8-tidy-debuginfo - update to 8.2.26-150600.3.9.1
php8-ldap-debuginfo - update to 8.2.26-150600.3.9.1
php8-openssl - update to 8.2.26-150600.3.9.1
php8-embed - update to 8.2.26-150600.3.9.1
php8-mysql - update to 8.2.26-150600.3.9.1
php8-shmop - update to 8.2.26-150600.3.9.1
php8-embed-debuginfo - update to 8.2.26-150600.3.9.1
php8-curl-debuginfo - update to 8.2.26-150600.3.9.1
php8-sqlite - update to 8.2.26-150600.3.9.1
php8-pdo-debuginfo - update to 8.2.26-150600.3.9.1
php8-embed-debugsource - update to 8.2.26-150600.3.9.1
php8-ldap - update to 8.2.26-150600.3.9.1
php8-pgsql-debuginfo - update to 8.2.26-150600.3.9.1
php8-sysvmsg-debuginfo - update to 8.2.26-150600.3.9.1
php8-bz2-debuginfo - update to 8.2.26-150600.3.9.1
php8-ftp-debuginfo - update to 8.2.26-150600.3.9.1
php8-soap - update to 8.2.26-150600.3.9.1
apache2-mod_php8 - update to 8.2.26-150600.3.9.1
php8-ffi - update to 8.2.26-150600.3.9.1
php8-enchant - update to 8.2.26-150600.3.9.1
php8-odbc-debuginfo - update to 8.2.26-150600.3.9.1
php8-fileinfo - update to 8.2.26-150600.3.9.1
php8-ffi-debuginfo - update to 8.2.26-150600.3.9.1
php8-phar - update to 8.2.26-150600.3.9.1
php8-opcache-debuginfo - update to 8.2.26-150600.3.9.1
php8-enchant-debuginfo - update to 8.2.26-150600.3.9.1
php8-fpm-debuginfo - update to 8.2.26-150600.3.9.1
php8-openssl-debuginfo - update to 8.2.26-150600.3.9.1
php8-ftp - update to 8.2.26-150600.3.9.1
php8-gd - update to 8.2.26-150600.3.9.1
php8-dom - update to 8.2.26-150600.3.9.1
php8-iconv-debuginfo - update to 8.2.26-150600.3.9.1
php8-gettext - update to 8.2.26-150600.3.9.1
php8-posix-debuginfo - update to 8.2.26-150600.3.9.1
php8-fastcgi - update to 8.2.26-150600.3.9.1
php8-calendar - update to 8.2.26-150600.3.9.1
php8-snmp-debuginfo - update to 8.2.26-150600.3.9.1
php8-dba - update to 8.2.26-150600.3.9.1
php8-tidy - update to 8.2.26-150600.3.9.1
php8-sysvsem-debuginfo - update to 8.2.26-150600.3.9.1
php8-gettext-debuginfo - update to 8.2.26-150600.3.9.1
php8-snmp - update to 8.2.26-150600.3.9.1
php8-odbc - update to 8.2.26-150600.3.9.1
php8-mbstring - update to 8.2.26-150600.3.9.1
php8-phar-debuginfo - update to 8.2.26-150600.3.9.1
php8-curl - update to 8.2.26-150600.3.9.1
php8-pcntl-debuginfo - update to 8.2.26-150600.3.9.1
php8-xsl-debuginfo - update to 8.2.26-150600.3.9.1
php8-gmp - update to 8.2.26-150600.3.9.1
php8-sockets-debuginfo - update to 8.2.26-150600.3.9.1
php8-mbstring-debuginfo - update to 8.2.26-150600.3.9.1
php8-bcmath-debuginfo - update to 8.2.26-150600.3.9.1
php8-ctype - update to 8.2.26-150600.3.9.1
php8-sysvshm - update to 8.2.26-150600.3.9.1
php8-zlib-debuginfo - update to 8.2.26-150600.3.9.1
php8-intl-debuginfo - update to 8.2.26-150600.3.9.1
php8-sockets - update to 8.2.26-150600.3.9.1
php8-soap-debuginfo - update to 8.2.26-150600.3.9.1
php8-tokenizer - update to 8.2.26-150600.3.9.1
php8-ctype-debuginfo - update to 8.2.26-150600.3.9.1
apache2-mod_php8-debugsource - update to 8.2.26-150600.3.9.1
php8-xmlreader-debuginfo - update to 8.2.26-150600.3.9.1
php8-zlib - update to 8.2.26-150600.3.9.1
php8-sodium-debuginfo - update to 8.2.26-150600.3.9.1
php8-debuginfo - update to 8.2.26-150600.3.9.1
php8-sqlite-debuginfo - update to 8.2.26-150600.3.9.1
php8-xmlwriter-debuginfo - update to 8.2.26-150600.3.9.1
php8-dom-debuginfo - update to 8.2.26-150600.3.9.1
php8-xsl - update to 8.2.26-150600.3.9.1
php8-xmlreader - update to 8.2.26-150600.3.9.1
php8-xmlwriter - update to 8.2.26-150600.3.9.1
php8-bcmath - update to 8.2.26-150600.3.9.1
php8-fpm - update to 8.2.26-150600.3.9.1
php8-debugsource - update to 8.2.26-150600.3.9.1
php8-exif - update to 8.2.26-150600.3.9.1
php8-cli-debuginfo - update to 8.2.26-150600.3.9.1
apache2-mod_php8-debuginfo - update to 8.2.26-150600.3.9.1
php8-zip - update to 8.2.26-150600.3.9.1
php8-tokenizer-debuginfo - update to 8.2.26-150600.3.9.1
php8-pgsql - update to 8.2.26-150600.3.9.1
php8-sysvshm-debuginfo - update to 8.2.26-150600.3.9.1
php8 - update to 8.2.26-150600.3.9.1
php8-bz2 - update to 8.2.26-150600.3.9.1
php8-sysvmsg - update to 8.2.26-150600.3.9.1
php8.3-mysql (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
libapache2-mod-php8.3 (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
php8.3-fpm (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
php8.3 (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
php8.3-cli (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
php8.3-cgi (Ubuntu package) - addressed in versions 8.3.6-0ubuntu0.24.04.3, 8.3.11-0ubuntu0.24.10.4
php - addressed in versions 8.3.14-1.fc40, 8.3.14-1.fc41
Oracle Solaris - update to 11.4 SRU 77

• https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv

• Multiple vulnerabilities in PHP
• Fedora 40 update for php
• Fedora 41 update for php
• Slackware Linux update for php
• cPanel EasyApache update for PHP
• Debian update for php8.2
• Fedora EPEL 9 update for php-extras
• openEuler update for php
• SUSE update for php8
• Ubuntu update for php7.0
• Ubuntu update for php7.4
• Ubuntu update for php7.4
• Multiple vulnerabilities in Tenable Security Center
• Oracle Solaris update for third-party components
• Anolis OS update for php