CVE-2024-9026

Public on 2024-09-29

Modified on 2024-10-09

Description

Logs from childrens may be altered

NOTE: Fixed in 8.3.12, 8.2.24
NOTE: https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5
NOTE: https://github.com/php/php-src/commit/1f8e16172c7961045c2b0f34ba7613e3f21cdee8 (PHP-8.2.24)

Severity

Low

CVSS v3 Base Score

3.3

See breakdown

Affected Packages

Platform	Package	Status
Amazon Linux 1	php	No Fix Planned
Amazon Linux 2 - Php8.1 Extra	php	Pending Fix
Amazon Linux 2 - Php8.2 Extra	php	Pending Fix
Amazon Linux 2 - Core	php	Not Affected
Amazon Linux 1	php56	No Fix Planned
Amazon Linux 2023	php8.1	Pending Fix
Amazon Linux 2023	php8.2	Pending Fix
Amazon Linux 2023	php8.3	Pending Fix

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	3.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NVD	CVSSv3	3.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References

Red Hat: CVE-2024-9026 Mitre: CVE-2024-9026