{"schemaVersion":3,"id":"USN-7157-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"php7.4, php8.1, php8.3 vulnerabilities\n\nIt was discovered that PHP incorrectly handled certain inputs when\nprocessed with convert.quoted-printable decode filters.\nAn attacker could possibly use this issue to expose sensitive\ninformation or cause a crash. (CVE-2024-11233)\n\nIt was discovered that PHP incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to performing arbitrary\nHTTP requests originating from the server, thus potentially\ngaining access to resources not normally available to the external\nuser. (CVE-2024-11234)\n\nIt was discovered that PHP incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash or\nexecute arbitrary code. (CVE-2024-11236, CVE-2024-8932)\n\nIt was discovered that PHP incorrectly handled certain MySQL requests.\nAn attacker could possibly use this issue to cause the client to\ndisclose the content of its heap containing data from other SQL requests\nand possible other data belonging to different users of the same server.\n(CVE-2024-8929)","dates":{"published":"2024-12-13T16:59:11.000Z","modified":"2026-04-27T17:47:18.567Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"php7.4","name":"php7.4","label":"php7.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.4","purlType":"deb","versions":[{"text":"< 7.4.3-4ubuntu2.26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.3-4ubuntu2.26","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.1","name":"php8.1","label":"php8.1","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.1","purlType":"deb","versions":[{"text":"< 8.1.2-1ubuntu2.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-1ubuntu2.20","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php8.3","name":"php8.3","label":"php8.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php8.3","purlType":"deb","versions":[{"text":"< 8.3.6-0ubuntu0.24.04.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.3.6-0ubuntu0.24.04.3","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7157-1","label":"ubuntu.com/security/notices/USN-7157-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-8929","label":"ubuntu.com/security/CVE-2024-8929","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-8932","label":"ubuntu.com/security/CVE-2024-8932","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-11233","label":"ubuntu.com/security/CVE-2024-11233","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-11234","label":"ubuntu.com/security/CVE-2024-11234","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-11236","label":"ubuntu.com/security/CVE-2024-11236","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-11233","CVE-2024-11234","CVE-2024-11236","CVE-2024-8929","CVE-2024-8932"],"downstream":[],"duplicates":[],"related":["CVE-2024-11233","CVE-2024-11234","CVE-2024-11236","CVE-2024-8929","CVE-2024-8932"]},"timeline":[{"kind":"published","date":"2024-12-13T16:59:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T17:47:18.567Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:20:55.831Z","stale":false,"partial":false}}