CVE catalog

CVE-2024-11236

PHP vulnerabilities

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Severity: High · CVSS 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Published: Nov 20, 2024, 11:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.07% · Oct 27, 2026

Projects and upstream resources

[php8.4][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "php8.2",
      "status": "fixed",
      "release": "bookworm",
      "version": "8.2.32-1~deb12u1"
    },
    {
      "name": "php8.2",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "8.2.35-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1088688,
      "name": "php8.2",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "8.2.26-1~deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "php8.3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "libapache2-mod-php8.3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "libphp8.3-embed",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-bcmath",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-bz2",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-cgi",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-cli",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-common",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-curl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-dba",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-enchant",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-fpm",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-gd",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-gmp",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-imap",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-interbase",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-intl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-ldap",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-mbstring",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-mysql",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-odbc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-opcache",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-pgsql",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-phpdbg",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-pspell",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-readline",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-snmp",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-soap",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-sqlite3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-sybase",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-tidy",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-xml",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-xsl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php8.3-zip",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3"
    },
    {
      "name": "php7.0",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.33-0ubuntu0.16.04.16+esm13"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.0.1-5",
        "7.0.1-6",
        "7.0.2-1",
        "7.0.2-3",
        "7.0.2-4",
        "7.0.2-5",
        "7.0.3-2",
        "7.0.3-3",
        "7.0.3-9ubuntu1",
        "7.0.4-5ubuntu1",
        "7.0.4-5ubuntu2",
        "7.0.4-7ubuntu1",
        "7.0.4-7ubuntu2",
        "7.0.4-7ubuntu2.1",
        "7.0.8-0ubuntu0.16.04.1",
        "7.0.8-0ubuntu0.16.04.2",
        "7.0.8-0ubuntu0.16.04.3",
        "7.0.13-0ubuntu0.16.04.1",
        "7.0.15-0ubuntu0.16.04.1",
        "7.0.15-0ubuntu0.16.04.2",
        "7.0.15-0ubuntu0.16.04.4",
        "7.0.18-0ubuntu0.16.04.1",
        "7.0.22-0ubuntu0.16.04.1",
        "7.0.25-0ubuntu0.16.04.1",
        "7.0.28-0ubuntu0.16.04.1",
        "7.0.30-0ubuntu0.16.04.1",
        "7.0.32-0ubuntu0.16.04.1",
        "7.0.33-0ubuntu0.16.04.1",
        "7.0.33-0ubuntu0.16.04.2",
        "7.0.33-0ubuntu0.16.04.3",
        "7.0.33-0ubuntu0.16.04.4",
        "7.0.33-0ubuntu0.16.04.5",
        "7.0.33-0ubuntu0.16.04.6",
        "7.0.33-0ubuntu0.16.04.7",
        "7.0.33-0ubuntu0.16.04.9",
        "7.0.33-0ubuntu0.16.04.11",
        "7.0.33-0ubuntu0.16.04.12",
        "7.0.33-0ubuntu0.16.04.14",
        "7.0.33-0ubuntu0.16.04.15",
        "7.0.33-0ubuntu0.16.04.16",
        "7.0.33-0ubuntu0.16.04.16+esm1",
        "7.0.33-0ubuntu0.16.04.16+esm2",
        "7.0.33-0ubuntu0.16.04.16+esm3",
        "7.0.33-0ubuntu0.16.04.16+esm4",
        "7.0.33-0ubuntu0.16.04.16+esm5",
        "7.0.33-0ubuntu0.16.04.16+esm6",
        "7.0.33-0ubuntu0.16.04.16+esm7",
        "7.0.33-0ubuntu0.16.04.16+esm8",
        "7.0.33-0ubuntu0.16.04.16+esm9",
        "7.0.33-0ubuntu0.16.04.16+esm10",
        "7.0.33-0ubuntu0.16.04.16+esm11",
        "7.0.33-0ubuntu0.16.04.16+esm12"
      ],
      "ecosystem": "deb",
      "fixed_version": "7.0.33-0ubuntu0.16.04.16+esm13",
      "provider_record_id": "USN-7153-1"
    },
    {
      "name": "php7.2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.24-0ubuntu0.18.04.17+esm7"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.2.1-1ubuntu2",
        "7.2.2-1ubuntu1",
        "7.2.2-1ubuntu2",
        "7.2.3-1ubuntu1",
        "7.2.5-0ubuntu0.18.04.1",
        "7.2.7-0ubuntu0.18.04.1",
        "7.2.7-0ubuntu0.18.04.2",
        "7.2.10-0ubuntu0.18.04.1",
        "7.2.15-0ubuntu0.18.04.1",
        "7.2.15-0ubuntu0.18.04.2",
        "7.2.17-0ubuntu0.18.04.1",
        "7.2.19-0ubuntu0.18.04.1",
        "7.2.19-0ubuntu0.18.04.2",
        "7.2.24-0ubuntu0.18.04.1",
        "7.2.24-0ubuntu0.18.04.2",
        "7.2.24-0ubuntu0.18.04.3",
        "7.2.24-0ubuntu0.18.04.4",
        "7.2.24-0ubuntu0.18.04.6",
        "7.2.24-0ubuntu0.18.04.7",
        "7.2.24-0ubuntu0.18.04.8",
        "7.2.24-0ubuntu0.18.04.9",
        "7.2.24-0ubuntu0.18.04.10",
        "7.2.24-0ubuntu0.18.04.11",
        "7.2.24-0ubuntu0.18.04.12",
        "7.2.24-0ubuntu0.18.04.13",
        "7.2.24-0ubuntu0.18.04.15",
        "7.2.24-0ubuntu0.18.04.16",
        "7.2.24-0ubuntu0.18.04.17",
        "7.2.24-0ubuntu0.18.04.17+esm1",
        "7.2.24-0ubuntu0.18.04.17+esm2",
        "7.2.24-0ubuntu0.18.04.17+esm3",
        "7.2.24-0ubuntu0.18.04.17+esm4",
        "7.2.24-0ubuntu0.18.04.17+esm5",
        "7.2.24-0ubuntu0.18.04.17+esm6"
      ],
      "ecosystem": "deb",
      "fixed_version": "7.2.24-0ubuntu0.18.04.17+esm7",
      "provider_record_id": "USN-7153-1"
    },
    {
      "name": "php5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.5.3+dfsg-1ubuntu2",
        "5.5.3+dfsg-1ubuntu3",
        "5.5.6+dfsg-1ubuntu1",
        "5.5.6+dfsg-1ubuntu2",
        "5.5.8+dfsg-2ubuntu1",
        "5.5.9+dfsg-1ubuntu1",
        "5.5.9+dfsg-1ubuntu2",
        "5.5.9+dfsg-1ubuntu3",
        "5.5.9+dfsg-1ubuntu4",
        "5.5.9+dfsg-1ubuntu4.1",
        "5.5.9+dfsg-1ubuntu4.2",
        "5.5.9+dfsg-1ubuntu4.3",
        "5.5.9+dfsg-1ubuntu4.4",
        "5.5.9+dfsg-1ubuntu4.5",
        "5.5.9+dfsg-1ubuntu4.6",
        "5.5.9+dfsg-1ubuntu4.7",
        "5.5.9+dfsg-1ubuntu4.9",
        "5.5.9+dfsg-1ubuntu4.11",
        "5.5.9+dfsg-1ubuntu4.12",
        "5.5.9+dfsg-1ubuntu4.13",
        "5.5.9+dfsg-1ubuntu4.14",
        "5.5.9+dfsg-1ubuntu4.16",
        "5.5.9+dfsg-1ubuntu4.17",
        "5.5.9+dfsg-1ubuntu4.19",
        "5.5.9+dfsg-1ubuntu4.20",
        "5.5.9+dfsg-1ubuntu4.21",
        "5.5.9+dfsg-1ubuntu4.22",
        "5.5.9+dfsg-1ubuntu4.23",
        "5.5.9+dfsg-1ubuntu4.24",
        "5.5.9+dfsg-1ubuntu4.25",
        "5.5.9+dfsg-1ubuntu4.26",
        "5.5.9+dfsg-1ubuntu4.27",
        "5.5.9+dfsg-1ubuntu4.29",
        "5.5.9+dfsg-1ubuntu4.29+esm1",
        "5.5.9+dfsg-1ubuntu4.29+esm2",
        "5.5.9+dfsg-1ubuntu4.29+esm3",
        "5.5.9+dfsg-1ubuntu4.29+esm4",
        "5.5.9+dfsg-1ubuntu4.29+esm5",
        "5.5.9+dfsg-1ubuntu4.29+esm6",
        "5.5.9+dfsg-1ubuntu4.29+esm8",
        "5.5.9+dfsg-1ubuntu4.29+esm10",
        "5.5.9+dfsg-1ubuntu4.29+esm11",
        "5.5.9+dfsg-1ubuntu4.29+esm12",
        "5.5.9+dfsg-1ubuntu4.29+esm13",
        "5.5.9+dfsg-1ubuntu4.29+esm14",
        "5.5.9+dfsg-1ubuntu4.29+esm15",
        "5.5.9+dfsg-1ubuntu4.29+esm16",
        "5.5.9+dfsg-1ubuntu4.29+esm17",
        "5.5.9+dfsg-1ubuntu4.29+esm18"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    },
    {
      "name": "php7.0",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.33-0ubuntu0.16.04.16+esm13"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.0.1-5",
        "7.0.1-6",
        "7.0.2-1",
        "7.0.2-3",
        "7.0.2-4",
        "7.0.2-5",
        "7.0.3-2",
        "7.0.3-3",
        "7.0.3-9ubuntu1",
        "7.0.4-5ubuntu1",
        "7.0.4-5ubuntu2",
        "7.0.4-7ubuntu1",
        "7.0.4-7ubuntu2",
        "7.0.4-7ubuntu2.1",
        "7.0.8-0ubuntu0.16.04.1",
        "7.0.8-0ubuntu0.16.04.2",
        "7.0.8-0ubuntu0.16.04.3",
        "7.0.13-0ubuntu0.16.04.1",
        "7.0.15-0ubuntu0.16.04.1",
        "7.0.15-0ubuntu0.16.04.2",
        "7.0.15-0ubuntu0.16.04.4",
        "7.0.18-0ubuntu0.16.04.1",
        "7.0.22-0ubuntu0.16.04.1",
        "7.0.25-0ubuntu0.16.04.1",
        "7.0.28-0ubuntu0.16.04.1",
        "7.0.30-0ubuntu0.16.04.1",
        "7.0.32-0ubuntu0.16.04.1",
        "7.0.33-0ubuntu0.16.04.1",
        "7.0.33-0ubuntu0.16.04.2",
        "7.0.33-0ubuntu0.16.04.3",
        "7.0.33-0ubuntu0.16.04.4",
        "7.0.33-0ubuntu0.16.04.5",
        "7.0.33-0ubuntu0.16.04.6",
        "7.0.33-0ubuntu0.16.04.7",
        "7.0.33-0ubuntu0.16.04.9",
        "7.0.33-0ubuntu0.16.04.11",
        "7.0.33-0ubuntu0.16.04.12",
        "7.0.33-0ubuntu0.16.04.14",
        "7.0.33-0ubuntu0.16.04.15",
        "7.0.33-0ubuntu0.16.04.16",
        "7.0.33-0ubuntu0.16.04.16+esm1",
        "7.0.33-0ubuntu0.16.04.16+esm2",
        "7.0.33-0ubuntu0.16.04.16+esm3",
        "7.0.33-0ubuntu0.16.04.16+esm4",
        "7.0.33-0ubuntu0.16.04.16+esm5",
        "7.0.33-0ubuntu0.16.04.16+esm6",
        "7.0.33-0ubuntu0.16.04.16+esm7",
        "7.0.33-0ubuntu0.16.04.16+esm8",
        "7.0.33-0ubuntu0.16.04.16+esm9",
        "7.0.33-0ubuntu0.16.04.16+esm10",
        "7.0.33-0ubuntu0.16.04.16+esm11",
        "7.0.33-0ubuntu0.16.04.16+esm12"
      ],
      "ecosystem": "deb",
      "fixed_version": "7.0.33-0ubuntu0.16.04.16+esm13",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    },
    {
      "name": "php7.2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.24-0ubuntu0.18.04.17+esm7"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.2.1-1ubuntu2",
        "7.2.2-1ubuntu1",
        "7.2.2-1ubuntu2",
        "7.2.3-1ubuntu1",
        "7.2.5-0ubuntu0.18.04.1",
        "7.2.7-0ubuntu0.18.04.1",
        "7.2.7-0ubuntu0.18.04.2",
        "7.2.10-0ubuntu0.18.04.1",
        "7.2.15-0ubuntu0.18.04.1",
        "7.2.15-0ubuntu0.18.04.2",
        "7.2.17-0ubuntu0.18.04.1",
        "7.2.19-0ubuntu0.18.04.1",
        "7.2.19-0ubuntu0.18.04.2",
        "7.2.24-0ubuntu0.18.04.1",
        "7.2.24-0ubuntu0.18.04.2",
        "7.2.24-0ubuntu0.18.04.3",
        "7.2.24-0ubuntu0.18.04.4",
        "7.2.24-0ubuntu0.18.04.6",
        "7.2.24-0ubuntu0.18.04.7",
        "7.2.24-0ubuntu0.18.04.8",
        "7.2.24-0ubuntu0.18.04.9",
        "7.2.24-0ubuntu0.18.04.10",
        "7.2.24-0ubuntu0.18.04.11",
        "7.2.24-0ubuntu0.18.04.12",
        "7.2.24-0ubuntu0.18.04.13",
        "7.2.24-0ubuntu0.18.04.15",
        "7.2.24-0ubuntu0.18.04.16",
        "7.2.24-0ubuntu0.18.04.17",
        "7.2.24-0ubuntu0.18.04.17+esm1",
        "7.2.24-0ubuntu0.18.04.17+esm2",
        "7.2.24-0ubuntu0.18.04.17+esm3",
        "7.2.24-0ubuntu0.18.04.17+esm4",
        "7.2.24-0ubuntu0.18.04.17+esm5",
        "7.2.24-0ubuntu0.18.04.17+esm6"
      ],
      "ecosystem": "deb",
      "fixed_version": "7.2.24-0ubuntu0.18.04.17+esm7",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    },
    {
      "name": "php7.4",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.4.3-4ubuntu2.26"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "7.4.3-4build1",
        "7.4.3-4build2",
        "7.4.3-4ubuntu1",
        "7.4.3-4ubuntu1.1",
        "7.4.3-4ubuntu2.2",
        "7.4.3-4ubuntu2.4",
        "7.4.3-4ubuntu2.5",
        "7.4.3-4ubuntu2.6",
        "7.4.3-4ubuntu2.7",
        "7.4.3-4ubuntu2.8",
        "7.4.3-4ubuntu2.9",
        "7.4.3-4ubuntu2.10",
        "7.4.3-4ubuntu2.11",
        "7.4.3-4ubuntu2.12",
        "7.4.3-4ubuntu2.13",
        "7.4.3-4ubuntu2.15",
        "7.4.3-4ubuntu2.16",
        "7.4.3-4ubuntu2.17",
        "7.4.3-4ubuntu2.18",
        "7.4.3-4ubuntu2.19",
        "7.4.3-4ubuntu2.20",
        "7.4.3-4ubuntu2.22",
        "7.4.3-4ubuntu2.23",
        "7.4.3-4ubuntu2.24"
      ],
      "ecosystem": "deb",
      "fixed_version": "7.4.3-4ubuntu2.26",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    },
    {
      "name": "php8.1",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.1.2-1ubuntu2.20"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "8.1.0~rc4-1ubuntu2",
        "8.1.0-1",
        "8.1.2-1ubuntu1",
        "8.1.2-1ubuntu2",
        "8.1.2-1ubuntu2.1",
        "8.1.2-1ubuntu2.2",
        "8.1.2-1ubuntu2.3",
        "8.1.2-1ubuntu2.4",
        "8.1.2-1ubuntu2.5",
        "8.1.2-1ubuntu2.6",
        "8.1.2-1ubuntu2.8",
        "8.1.2-1ubuntu2.9",
        "8.1.2-1ubuntu2.10",
        "8.1.2-1ubuntu2.11",
        "8.1.2-1ubuntu2.13",
        "8.1.2-1ubuntu2.14",
        "8.1.2-1ubuntu2.15",
        "8.1.2-1ubuntu2.17",
        "8.1.2-1ubuntu2.18",
        "8.1.2-1ubuntu2.19"
      ],
      "ecosystem": "deb",
      "fixed_version": "8.1.2-1ubuntu2.20",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    },
    {
      "name": "php8.3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.3.6-0ubuntu0.24.04.3"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "8.3.0-1",
        "8.3.0-1ubuntu1",
        "8.3.4-1",
        "8.3.4-1build1",
        "8.3.6-0maysync1",
        "8.3.6-0ubuntu0.24.04.1",
        "8.3.6-0ubuntu0.24.04.2"
      ],
      "ecosystem": "deb",
      "fixed_version": "8.3.6-0ubuntu0.24.04.3",
      "provider_record_id": "UBUNTU-CVE-2024-11236"
    }
  ]
}

[Debian bug #1088688]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libapache2-mod-php8.2]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[libphp8.2-embed]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2]Unknown
Details (4)
- 8.2.32-1~deb12u1 · all · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · all · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-bcmath]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-bz2]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-cgi]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-cli]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-common]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-curl]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-dba]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-dev]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-enchant]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-fpm]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-gd]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-gmp]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-imap]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-interbase]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-intl]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-ldap]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-mbstring]Unknown
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 8.2.26-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12

Next results

Observed: Oct 27, 2026, 12:37:52 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]