In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php83Upgrade php81 | Aug 8, 2025 | Nov 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade php-gmpUpgrade php-mbstringUpgrade php-fpmUpgrade php-soapUpgrade php-processUpgrade php-bcmathUpgrade php-develUpgrade php-gdUpgrade php-pspellUpgrade php-commonUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pdoUpgrade php-enchantUpgrade php-cliUpgrade php-intlUpgrade php-sodiumUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-xmlUpgrade php-embeddedUpgrade php-dbgUpgrade php-snmpUpgrade php-dbaUpgrade php-debuginfoUpgrade php-ldapUpgrade php | Feb 26, 2025 | Nov 22, 2024 |
| Amazon_linux_2023 | — | Upgrade php8.1-bcmath-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.2-embeddedUpgrade php8.1-fpmUpgrade php8.1-tidy-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.3-develUpgrade php8.2-dba-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.1-mbstringUpgrade php8.3-gmp-debuginfoUpgrade php8.3-snmpUpgrade php8.3-mbstringUpgrade php8.3-enchant-debuginfoUpgrade php8.2-odbcUpgrade php8.2-tidyUpgrade php8.3-debuginfoUpgrade php8.3Upgrade php8.3-pspellUpgrade php8.2-ffi-debuginfoUpgrade php8.2-gmpUpgrade php8.3-processUpgrade php8.1-debugsourceUpgrade php8.1-intl-debuginfoUpgrade php8.2-pdo-debuginfoUpgrade php8.2-pdoUpgrade php8.3-gmpUpgrade php8.3-intlUpgrade php8.3-fpmUpgrade php8.3-sodium-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.2-intlUpgrade php8.1-dbg-debuginfoUpgrade php8.3-cliUpgrade php8.1-opcache-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.1-bcmathUpgrade php8.3-dbaUpgrade php8.1Upgrade php8.1-pspellUpgrade php8.3-modphp-debuginfoUpgrade php8.1-gdUpgrade php8.2-sodium-debuginfoUpgrade php8.3-embedded-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-zip-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.1-soapUpgrade php8.2-commonUpgrade php8.3-ldapUpgrade php8.2-dbg-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-fpmUpgrade php8.3-sodiumUpgrade php8.2-enchantUpgrade php8.3-tidy-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-opcacheUpgrade php8.2-mbstring-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-commonUpgrade php8.3-soapUpgrade php8.2-xmlUpgrade php8.1-snmp-debuginfoUpgrade php8.1-develUpgrade php8.3-process-debuginfoUpgrade php8.2-pgsqlUpgrade php8.3-debugsourceUpgrade php8.2-debugsourceUpgrade php8.2-zip-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-ffiUpgrade php8.2-gdUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-ffiUpgrade php8.3-opcacheUpgrade php8.3-dbgUpgrade php8.2-dbgUpgrade php8.2-fpm-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.3-pgsqlUpgrade php8.3-pdoUpgrade php8.1-pdoUpgrade php8.1-embeddedUpgrade php8.2-sodiumUpgrade php8.2-soapUpgrade php8.2-intl-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-dbgUpgrade php8.3-odbc-debuginfoUpgrade php8.3-ffiUpgrade php8.2-develUpgrade php8.3-zip-debuginfoUpgrade php8.3-odbcUpgrade php8.3-fpm-debuginfoUpgrade php8.3-enchantUpgrade php8.3-dbg-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.2-cliUpgrade php8.1-snmpUpgrade php8.1-process-debuginfoUpgrade php8.1-mysqlndUpgrade php8.3-embeddedUpgrade php8.1-intlUpgrade php8.2-processUpgrade php8.1-pspell-debuginfoUpgrade php8.1-cliUpgrade php8.1-processUpgrade php8.3-zipUpgrade php8.3-ffi-debuginfoUpgrade php8.3-tidyUpgrade php8.3-modphpUpgrade php8.2-gd-debuginfoUpgrade php8.1-zipUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.2-mysqlndUpgrade php8.2-dbaUpgrade php8.2-cli-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-commonUpgrade php8.3-soap-debuginfoUpgrade php8.3-gdUpgrade php8.3-bcmathUpgrade php8.2-zipUpgrade php8.2-snmp-debuginfoUpgrade php8.2-opcacheUpgrade php8.2-ldapUpgrade php8.1-ffi-debuginfoUpgrade php8.2-pspellUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-mbstringUpgrade php8.1-tidyUpgrade php8.1-soap-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-odbcUpgrade php8.1-dba-debuginfoUpgrade php8.3-mysqlndUpgrade php8.3-intl-debuginfoUpgrade php8.2-snmpUpgrade php8.1-debuginfoUpgrade php8.2-xml-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-enchantUpgrade php8.3-xmlUpgrade php8.3-gd-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-debuginfoUpgrade php8.2Upgrade php8.1-gmpUpgrade php8.1-dbaUpgrade php8.1-common-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.3-cli-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.1-pgsqlUpgrade php8.3-snmp-debuginfoUpgrade php8.1-xmlUpgrade php8.1-ldap | Feb 26, 2025 | Nov 22, 2024 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Dec 2, 2024 | Nov 22, 2024 |
| Php | — | Upgrade to PHP version 8.1.31Upgrade to PHP version 8.2.26Upgrade to PHP version 8.3.14 | Feb 17, 2026 | Feb 17, 2026 |
| Suse | — | Upgrade php8-pdoUpgrade php8-shmopUpgrade php8-bz2Upgrade php8-exifUpgrade php8-pgsqlUpgrade php8-sqliteUpgrade php8-gmpUpgrade php8-ffiUpgrade php8-mbstringUpgrade php8-bcmathUpgrade php8-intlUpgrade php8-calendarUpgrade php8-sysvshmUpgrade php8-testUpgrade php8-enchantUpgrade php8-gettextUpgrade php8-readlineUpgrade php8-gdUpgrade php8-pharUpgrade php8-sysvsemUpgrade apache2-mod_php8Upgrade php8-fastcgiUpgrade php8-domUpgrade php8-sodiumUpgrade php8-socketsUpgrade php8-iconvUpgrade php8-ftpUpgrade php8-mysqlUpgrade php8Upgrade php8-zlibUpgrade php8-dbaUpgrade php8-xslUpgrade php8-snmpUpgrade php8-ctypeUpgrade php8-sysvmsgUpgrade php8-opensslUpgrade php8-tokenizerUpgrade php8-soapUpgrade php8-embedUpgrade php8-fpm-apacheUpgrade php8-fileinfoUpgrade php8-curlUpgrade php8-develUpgrade php8-cliUpgrade php8-zipUpgrade php8-posixUpgrade php8-pcntlUpgrade php8-ldapUpgrade php8-fpmUpgrade php8-tidyUpgrade php8-opcacheUpgrade php8-odbcUpgrade php8-xmlwriterUpgrade php8-xmlreader | Dec 31, 2024 | Nov 22, 2024 |
| Ubuntu | — | Upgrade php8.3-cliUpgrade php8.3-mysqlUpgrade libapache2-mod-php8.1Upgrade php7.4-ldapUpgrade php7.0-cgi (Ubuntu Pro)Upgrade php8.1-mysqlUpgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php8.1-enchantUpgrade php7.4Upgrade php7.0-ldap (Ubuntu Pro)Upgrade php8.3-fpmUpgrade php7.0 (Ubuntu Pro)Upgrade php7.4-mysqlUpgrade libapache2-mod-php8.3Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php8.1-fpmUpgrade php8.1-cgiUpgrade php8.3-cgiUpgrade php7.4-cliUpgrade php7.0-mysql (Ubuntu Pro)Upgrade php8.1Upgrade php8.1-cliUpgrade libapache2-mod-php8.0Upgrade php7.4-fpmUpgrade php7.0-cli (Ubuntu Pro)Upgrade php8.3 | Dec 16, 2024 | Nov 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub