Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-3824HistoryAug 11, 2023 - 6:15 a.m.
CVE-2023-3824
2023-08-1106:15:10
Alpine Linux Development Team
security.alpinelinux.org
152
php
version 8.0-8.2
stack buffer overflow
memory corruption
rce
security vulnerability
cve-2023-3824
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.001
Percentile
49.2%
In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.16-community | noarch | php8 | < 8.0.30-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | php81 | < 8.1.22-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | php81 | < 8.1.22-r0 | UNKNOWN |
Related
thn
thn
LockBit Ransomware Group Resurfaces After Law Enforcement Takedown
2024-02-26 04:57:00
LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid
2024-02-20 05:25:00
nvd
nvd
CVE-2023-3824
2023-08-11 06:15:10
githubexploit
githubexploit
prion
prion
Stack overflow
2023-08-11 06:15:00
cnvd
cnvd
PHP buffer overflow vulnerability (CNVD-2023-64640)
2023-08-15 00:00:00
krebs
krebs
hivepro
hivepro
LockBit Takedown and Resurgence
2024-03-19 19:26:05
cbl_mariner
cbl_mariner
CVE-2023-3824 affecting package php for versions less than 8.1.22-1
2023-09-13 02:10:38
cvelist
cvelist
CVE-2023-3824 Buffer overflow and overread in phar_dir_read()
2023-08-11 05:48:34
ubuntucve
ubuntucve
CVE-2023-3824
2023-08-11 00:00:00
veracode
veracode
Buffer Overflow
2023-08-06 12:58:00
debiancve
debiancve
CVE-2023-3824
2023-08-11 06:15:10
osv
osv
BIT-php-2023-3824
2024-03-06 11:01:21
php8-8.2.9-1.1 on GA media
2024-06-15 00:00:00
CVE-2023-3824
2023-08-11 06:15:10
redhatcve
redhatcve
CVE-2023-3824
2023-08-22 17:49:49
cve
cve
CVE-2023-3824
2023-08-11 06:15:10
nessus
nessus
Fedora 38 : php (2023-984c26961f)
2023-08-12 00:00:00
Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2023-325)
2023-09-08 00:00:00
Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2023-324)
2023-09-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for php7 (SUSE-SU-2023:3541-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2023-3145)
2023-11-09 00:00:00
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2023-3445)
2023-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: php-8.1.22-1.fc37
2023-08-11 01:01:34
[SECURITY] Fedora 38 Update: php-8.2.9-2.fc38
2023-08-12 04:25:54
cloudlinux
cloudlinux
php: Fix of 2 CVEs
2023-08-21 15:39:32
mageia
mageia
Updated php packages fix security vulnerability
2023-08-23 22:56:41
ubuntu
ubuntu
PHP vulnerabilities
2023-08-23 00:00:00
PHP vulnerabilities
2024-02-27 00:00:00
PHP regression
2024-07-03 00:00:00
debian
debian
[SECURITY] [DLA 3555-1] php7.3 security update
2023-09-05 21:01:39
[SECURITY] [DSA 5661-1] php8.2 security update
2024-04-15 19:27:08
[SECURITY] [DSA 5660-1] php7.4 security update
2024-04-15 19:25:52
redos
redos
ROS-20240816-08
2024-08-16 00:00:00
oraclelinux
oraclelinux
php:8.0 security update
2023-10-23 00:00:00
php security update
2023-10-22 00:00:00
php:8.1 security update
2024-01-25 00:00:00
almalinux
almalinux
Important: php:8.0 security update
2023-10-19 00:00:00
Moderate: php:8.1 security update
2024-01-24 00:00:00
Important: php security update
2023-10-19 00:00:00
rocky
rocky
php security update
2023-10-24 18:36:55
php:8.0 security update
2023-10-24 18:35:47
php:8.1 security update
2024-02-12 20:17:50
redhat
redhat
(RHSA-2023:5926) Important: php security update
2023-10-19 12:43:29
(RHSA-2024:0387) Moderate: php:8.1 security update
2024-01-24 09:41:37
(RHSA-2023:5927) Important: php:8.0 security update
2023-10-19 12:45:04
gentoo
gentoo
PHP: Multiple Vulnerabilities
2024-08-12 00:00:00
qualysblog
qualysblog
Oracle Patch Tuesday, October 2023 Security Update Review
2023-10-18 17:11:20
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.001
Percentile
49.2%
Related for ALPINE:CVE-2023-3824