1 matches found
AZL-42628 CVE-2024-2408 affecting package php for versions less than 8.1.29-1
The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.com/openssl/openssl/pull/13817...
5.9CVSS6.4AI score0.01158EPSS
SaveExploits1References1
20