2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PHP","vendor":"PHP Group","versions":[{"lessThan":"8.3.5","status":"affected","version":"8.3.*","versionType":"semver"}]}],"source":"security@php.net"},{"affectedData":[{"cpes":["cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"php","vendor":"php_group","versions":[{"status":"affected","version":"8.3"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","matchCriteriaId":"BE619987-797E-493B-B089-2E1CADDA9C47","versionEndExcluding":"8.3.5","versionStartIncluding":"8.3.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function."},{"lang":"es","value":"En PHP 8.3.* anterior a 8.3.5, la función mb_encode_mimeheader() se ejecuta sin cesar para algunas entradas que contienen cadenas largas de caracteres que no son espacios seguidos de un espacio. Esto podría provocar un posible ataque DoS si un usuario hostil envía datos a una aplicación que utiliza esta función."}],"id":"CVE-2024-2757","lastModified":"2026-06-17T07:25:29.127","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security@php.net","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2757","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-04-29T11:27:03.875027Z","version":"2.0.3"}}]},"published":"2024-04-29T04:15:08.113","references":[{"source":"security@php.net","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2024/04/12/11"},{"source":"security@php.net","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq"},{"source":"security@php.net","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20240510-0011/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2024/04/12/11"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20240510-0011/"}],"sourceIdentifier":"security@php.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-400"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|