Lucene search
+L

1 matches found

OSV
OSV
added 2024/06/09 8:15 p.m.10 views

AZL-42628 CVE-2024-2408 affecting package php for versions less than 8.1.29-1

The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.com/openssl/openssl/pull/13817...

5.9CVSS6.4AI score0.01158EPSS
SaveExploits1References1
Rows per page
Query Builder