Lucene search
K

22 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в php8.1, php7.3

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, and 8.3. before 8.3.14, uncontrolled long string inputs to the ldapescape function on 32-bit systems can lead to an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.2AI score0.00347EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в php7.3

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, and 8.3. before 8.3.14, uncontrolled long string inputs to the ldapescape function on 32-bit systems can lead to an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.4AI score0.00443EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-016513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016513 advisory. In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescapefunction on 32-bit systems can cause an...

9.8CVSS6.6AI score0.00443EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-005273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005273 advisory. In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescapefunction on 32-bit systems can cause an...

9.8CVSS7.1AI score0.00347EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

python-ldap 安全漏洞

python-ldap is a python foundation LDAP client API for Python. A security vulnerability exists in python-ldap versions prior to 3.4.5, which stems from the ldap.dn.escapednchars function incorrectly escaping x00, which could lead to a client denial of service...

6.9CVSS6.2AI score0.00142EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-1916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect size calculation in ldapescape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue...

9.8CVSS8.3AI score0.00806EPSS
Exploits0References2
OSV
OSV
added 2025/08/11 1:54 p.m.2 views

BIT-LIBPHP-2024-11236 Integer overflow in the firebird and dblib quoters causing OOB writes

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS7.1AI score0.00443EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2025/02/14 5:33 a.m.1 views

SUSE CVE-2024-11236

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

8.2CVSS6.5AI score0.00443EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2024/12/09 8:0 a.m.1 views

OOB access in ldap_escape

...

9.8CVSS7AI score0.00347EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:0 a.m.1 views

The vulnerability of the ldap_escape() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the ldapescape function in the PHP programming language is related to the escape operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

10CVSS6.2AI score0.00347EPSS
Exploits0References10Affected Software3
OSV
OSV
added 2024/11/24 1:15 a.m.1 views

DEBIAN-CVE-2024-11236

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.3AI score0.00443EPSS
Exploits1References1
OSV
OSV
added 2024/11/24 1:15 a.m.1 views

AZL-53718 CVE-2024-11236 affecting package php for versions less than 8.1.31-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.2AI score0.00443EPSS
Exploits1References1
OSV
OSV
added 2024/11/24 1:15 a.m.2 views

AZL-53447 CVE-2024-11236 affecting package php for versions less than 8.3.14-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.2AI score0.00443EPSS
Exploits1References1
OSV
OSV
added 2024/11/24 1:15 a.m.1 views

UBUNTU-CVE-2024-11236

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.6AI score0.00443EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/11/24 12:0 a.m.1 views

PHP 安全漏洞

PHP is a scripting language in which PHP is executed server-side. A security vulnerability exists in PHP. An attacker who exploits this vulnerability can cause an integer overflow by entering an uncontrolled long string into the ldapescape function, resulting in an out-of-bounds write. The...

9.8CVSS6.4AI score0.00443EPSS
Exploits1References3
OSV
OSV
added 2024/11/22 6:15 a.m.4 views

AZL-53748 CVE-2024-8932 affecting package php for versions less than 8.1.31-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.2AI score0.00347EPSS
Exploits0References1
OSV
OSV
added 2024/11/22 6:15 a.m.1 views

DEBIAN-CVE-2024-8932

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS5.8AI score0.00347EPSS
Exploits0References1
OSV
OSV
added 2024/11/22 6:15 a.m.1 views

AZL-53480 CVE-2024-8932 affecting package php for versions less than 8.3.14-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS5.8AI score0.00347EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.4 views

PT-2024-8392

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.31 PHP versions 8.2. before 8.2.26 PHP versions 8.3. before 8.3.14 Description: The issue is related to an integer overflow in the ldap escape function on 32-bit systems when handling uncontrolled long string...

10CVSS9.8AI score0.94374EPSS
Exploits77References163
Positive Technologies
Positive Technologies
added 2024/11/15 12:0 a.m.4 views

PT-2024-8904

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.30 PHP versions 8.2. through 8.2.25 PHP versions 8.3. through 8.3.13 Description: The issue is related to the ldap escape function in PHP, which can cause an integer overflow when given uncontrolled long string...

9.8CVSS8.6AI score0.94374EPSS
Exploits76References181
Rows per page
Query Builder