CVE-2024-11236
Public on 2024-11-21
Modified on 2024-11-21
Description
The upstream advisory describes this issue as follows:
Integer overflow in the firebird and dblib quoters causing OOB writes
Integer overflow in the firebird and dblib quoters causing OOB writes
Severity
Medium
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | php | Not Affected | ||
| Amazon Linux 2 - Php8.1 Extra | php | Not Affected | ||
| Amazon Linux 2 - Php8.2 Extra | php | Not Affected | ||
| Amazon Linux 1 | php54 | No Fix Planned | ||
| Amazon Linux 1 | php56 | No Fix Planned | ||
| Amazon Linux 1 | php70 | No Fix Planned | ||
| Amazon Linux 1 | php71 | No Fix Planned | ||
| Amazon Linux 1 | php72 | No Fix Planned | ||
| Amazon Linux 1 | php73 | No Fix Planned | ||
| Amazon Linux 2023 | php8.1 | Not Affected | ||
| Amazon Linux 2023 | php8.2 | Not Affected | ||
| Amazon Linux 2023 | php8.3 | Not Affected |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
| NVD | CVSSv3 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |