Lucene search
+L

CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

🗓️ 09 Jun 2024 18:36:50Reported by phpType 
cvelist
 cvelist
🔗 www.cve.org👁 170 Views

PHP proc_open() command injection CVE-2024-5585

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in PHP might affect IBM Storage Sentinel Anomaly Scan Engine.
14 Apr 202506:52
–ibm
alpinelinux
AlpineLinux
CVE-2024-5585
9 Jun 202418:36
–alpinelinux
bdu_fstec
BDU FSTEC
PHP proc_open Command Execution
22 Jul 202400:00
–bdu_fstec
cbl_mariner
CBLMariner
CVE-2024-5585 affecting package php for versions less than 8.1.29-1
16 Jun 202416:44
–cbl_mariner
cbl_mariner
CBLMariner
CVE-2024-5585 affecting package php for versions less than 8.3.8-1
2 Jul 202423:30
–cbl_mariner
cgr
Chainguard
CVE-2024-5585 vulnerabilities
9 Jun 202419:15
–cgr
circl
Circl
CVE-2024-5585
11 Jun 202413:54
–circl
cnnvd
CNNVD
PHP security vulnerabilities
29 Apr 202400:00
–cnnvd
cnnvd
CNNVD
PHP Security Vulnerabilities
9 Jun 202400:00
–cnnvd
cve
CVE
CVE-2024-5585
9 Jun 202418:36
–cve
Rows per page
[
  {
    "defaultStatus": "affected",
    "modules": [
      "proc_open"
    ],
    "platforms": [
      "Windows"
    ],
    "product": "PHP",
    "repo": "https://github.com/php/php-src",
    "vendor": "PHP Group",
    "versions": [
      {
        "lessThan": "8.1.29",
        "status": "affected",
        "version": "8.1.*",
        "versionType": "semver"
      },
      {
        "lessThan": "8.2.20",
        "status": "affected",
        "version": "8.2.*",
        "versionType": "semver"
      },
      {
        "lessThan": "8.3.8",
        "status": "affected",
        "version": "8.3.*",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jul 2024 14:06Current
CVSS 3.17.7
EPSS0.28807
SSVC
170