REDHAT-BUG-2328521: Medium severity PHP PHP vulnerability
In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.1.31 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.2.26 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 8.3.14
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2328521?
REDHAT-BUG-2328521 is classified as a moderate severity vulnerability due to its potential to cause crashes and memory disclosure.
How do I fix REDHAT-BUG-2328521?
To fix REDHAT-BUG-2328521, upgrade PHP to version 8.1.31 or later, 8.2.26 or later, or 8.3.14 or later.
Which PHP versions are affected by REDHAT-BUG-2328521?
PHP versions 8.1.* prior to 8.1.31, 8.2.* prior to 8.2.26, and 8.3.* prior to 8.3.14 are affected by REDHAT-BUG-2328521.
What types of issues can REDHAT-BUG-2328521 cause?
REDHAT-BUG-2328521 can lead to buffer overread, application crashes, or exposure of sensitive memory content.
Is REDHAT-BUG-2328521 being actively addressed by PHP maintainers?
Yes, PHP maintainers have released patches to address REDHAT-BUG-2328521 in the latest versions.