一、漏洞信息
漏洞编号:CVE-2024-8929
漏洞归属组件:php
漏洞归属的版本:7.2.10,7.2.34,8.0.0,8.0.23,8.0.24,8.0.25,8.0.26,8.0.27,8.0.28,8.0.29,8.0.30,8.1.1,8.1.10,8.1.11,8.1.12,8.1.13,8.2.0,8.2.1,8.2.10
CVSS V3.0分值:
BaseScore:0.0 None
Vector:CVSS:3.0/
漏洞简述:
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.
漏洞公开时间:2024-11-22 15:15:03
漏洞创建时间:2024-11-20 09:30:20
漏洞详情参考链接:
https://nvd.nist.gov/vuln/detail/CVE-2024-8929
漏洞分析指导链接:
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
其它
漏洞补丁信息:
无
二、漏洞分析结构反馈
影响性分析说明:
By connecting to a fake MySQL server or tampering with network packets and initiating a SQL Query, it is possible to abuse the function static enum_func_status php_mysqlnd_rset_field_read when parsing MySQL fields packets in order to include the rest of the heap content starting from the address of the cursor of the currently read buffer.
openEuler评分:
5.8
Vector:CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
受影响版本排查(受影响/不受影响):
1.master(8.3.6):受影响
2.openEuler-20.03-LTS-SP4(8.0.30):受影响
3.openEuler-22.03-LTS-SP1(8.0.30):受影响
4.openEuler-22.03-LTS-SP3(8.0.30):受影响
5.openEuler-22.03-LTS-SP4(8.0.30):受影响
6.openEuler-24.03-LTS(8.3.6):受影响
7.openEuler-24.03-LTS-Next(8.3.6):受影响
8.openEuler-24.03-LTS-SP1:受影响
修复是否涉及abi变化(是/否):
1.master(8.3.6):否
2.openEuler-20.03-LTS-SP4(8.0.30):否
3.openEuler-22.03-LTS-SP1(8.0.30):否
4.openEuler-22.03-LTS-SP3(8.0.30):否
5.openEuler-22.03-LTS-SP4(8.0.30):否
6.openEuler-24.03-LTS(8.3.6):否
7.openEuler-24.03-LTS-Next(8.3.6):否
8.openEuler-24.03-LTS-SP1:否
原因说明:
1.master(8.3.6):正常修复
2.openEuler-20.03-LTS-SP4(8.0.30):正常修复
3.openEuler-22.03-LTS-SP1(8.0.30):正常修复
4.openEuler-22.03-LTS-SP3(8.0.30):正常修复
5.openEuler-22.03-LTS-SP4(8.0.30):正常修复
6.openEuler-24.03-LTS(8.3.6):正常修复
7.openEuler-24.03-LTS-Next(8.3.6):正常修复
8.openEuler-24.03-LTS-SP1:正常修复
三、漏洞修复
安全公告链接:https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-2478
此处可能存在不合适展示的内容,页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容,可点击提交进行申诉,我们将尽快为您处理。
影响性分析说明:
A heap-use-after-free vulnerability in the sapi_read_post_data function within PHP’s CLI server allows an attacker to potentially exploit memory safety issues during POST request processing.
openEuler评分: (评分和向量)
受影响版本排查(受影响/不受影响):
1.master(8.3.6):受影响
2.openEuler-20.03-LTS-SP4(8.0.30):受影响
3.openEuler-22.03-LTS-SP1(8.0.30):受影响
4.openEuler-22.03-LTS-SP3(8.0.30):受影响
5.openEuler-22.03-LTS-SP4(8.0.30):受影响
6.openEuler-24.03-LTS(8.3.6):受影响
7.openEuler-24.03-LTS-Next(8.3.6):受影响
8.openEuler-24.03-LTS-SP1:受影响
修复是否涉及abi变化(是/否):
1.master(8.3.6):否
2.openEuler-20.03-LTS-SP4(8.0.30):否
3.openEuler-22.03-LTS-SP1(8.0.30):否
4.openEuler-22.03-LTS-SP3(8.0.30):否
5.openEuler-22.03-LTS-SP4(8.0.30):否
6.openEuler-24.03-LTS(8.3.6):否
7.openEuler-24.03-LTS-Next(8.3.6):否
8.openEuler-24.03-LTS-SP1:否
原因说明:
1.master(8.3.6):正常修复
2.openEuler-20.03-LTS-SP4(8.0.30):暂不修复-暂无解决方案或补丁
3.openEuler-22.03-LTS-SP1(8.0.30):暂不修复-暂无解决方案或补丁
4.openEuler-22.03-LTS-SP3(8.0.30):暂不修复-暂无解决方案或补丁
5.openEuler-22.03-LTS-SP4(8.0.30):暂不修复-暂无解决方案或补丁
6.openEuler-24.03-LTS(8.3.6):正常修复
7.openEuler-24.03-LTS-Next(8.3.6):正常修复
8.openEuler-24.03-LTS-SP1:正常修复
影响性分析说明:
By connecting to a fake MySQL server or tampering with network packets and initiating a SQL Query, it is possible to abuse the function static enum_func_status php_mysqlnd_rset_field_read when parsing MySQL fields packets in order to include the rest of the heap content starting from the address of the cursor of the currently read buffer.
openEuler评分:
5.8
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
/reason openEuler 22.03 LTS 尚在等待修复
issue状态 | 操作者 | 原因 |
---|---|---|
已挂起 | fundawang | openEuler 22.03 LTS 尚在等待修复 |
原因说明:
1.master(8.3.6):正常修复
2.openEuler-20.03-LTS-SP4(8.0.30):正常修复
3.openEuler-22.03-LTS-SP1(8.0.30):正常修复
4.openEuler-22.03-LTS-SP3(8.0.30):正常修复
5.openEuler-22.03-LTS-SP4(8.0.30):正常修复
6.openEuler-24.03-LTS(8.3.6):正常修复
7.openEuler-24.03-LTS-Next(8.3.6):正常修复
8.openEuler-24.03-LTS-SP1:正常修复
原因说明:
1.master(8.3.6):正常修复
2.openEuler-20.03-LTS-SP4(8.0.30):正常修复
3.openEuler-22.03-LTS-SP1(8.0.30):正常修复
4.openEuler-22.03-LTS-SP3(8.0.30):正常修复
5.openEuler-22.03-LTS-SP4(8.0.30):正常修复
6.openEuler-24.03-LTS(8.3.6):正常修复
7.openEuler-24.03-LTS-Next(8.3.6):正常修复
8.openEuler-24.03-LTS-SP1:正常修复
登录 后才可以发表评论