PHP is vulnerable to the Marvin Attack (CVE-2024-2408)
PHP's openssl_private_decrypt function using PKCS1 padding is vulnerable to the Marvin Attack unless used with OpenSSL versions that include the rsa_pkcs1_implicit_rejection fix. This fix is part of OpenSSL 3.2 and backported to stable Linux distributions and recent PHP Windows builds. PHP Windows builds version 8.1.29, 8.2.20, and 8.3.8 and above include the patched OpenSSL versions that mitigate this vulnerability.
AI Analysis
Technical Summary
The vulnerability (CVE-2024-2408) affects the openssl_private_decrypt function in PHP when using the default PKCS1 padding. Without the OpenSSL patch from pull request https://github.com/openssl/openssl/pull/13817 (rsa_pkcs1_implicit_rejection), PHP is susceptible to the Marvin Attack. This patch is included in OpenSSL 3.2 and has been backported to stable Linux distributions and PHP Windows builds starting from versions 8.1.29, 8.2.20, and 8.3.8. Distributors and builders are advised to ensure these patched OpenSSL versions are used to prevent exploitation.
Potential Impact
If unpatched, PHP applications using openssl_private_decrypt with PKCS1 padding may be vulnerable to the Marvin Attack, potentially compromising cryptographic operations relying on this function. The exact impact details are not provided, but the vulnerability is rated medium severity. No known exploits in the wild have been reported.
Mitigation Recommendations
A patch is available and included in OpenSSL 3.2 and backported versions. PHP Windows builds 8.1.29, 8.2.20, and 8.3.8 and later include the necessary OpenSSL patches. Users should upgrade to these PHP versions or ensure their OpenSSL libraries include the rsa_pkcs1_implicit_rejection fix to mitigate the vulnerability.
PHP is vulnerable to the Marvin Attack (CVE-2024-2408)
Description
PHP's openssl_private_decrypt function using PKCS1 padding is vulnerable to the Marvin Attack unless used with OpenSSL versions that include the rsa_pkcs1_implicit_rejection fix. This fix is part of OpenSSL 3.2 and backported to stable Linux distributions and recent PHP Windows builds. PHP Windows builds version 8.1.29, 8.2.20, and 8.3.8 and above include the patched OpenSSL versions that mitigate this vulnerability.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2024-2408) affects the openssl_private_decrypt function in PHP when using the default PKCS1 padding. Without the OpenSSL patch from pull request https://github.com/openssl/openssl/pull/13817 (rsa_pkcs1_implicit_rejection), PHP is susceptible to the Marvin Attack. This patch is included in OpenSSL 3.2 and has been backported to stable Linux distributions and PHP Windows builds starting from versions 8.1.29, 8.2.20, and 8.3.8. Distributors and builders are advised to ensure these patched OpenSSL versions are used to prevent exploitation.
Potential Impact
If unpatched, PHP applications using openssl_private_decrypt with PKCS1 padding may be vulnerable to the Marvin Attack, potentially compromising cryptographic operations relying on this function. The exact impact details are not provided, but the vulnerability is rated medium severity. No known exploits in the wild have been reported.
Mitigation Recommendations
A patch is available and included in OpenSSL 3.2 and backported versions. PHP Windows builds 8.1.29, 8.2.20, and 8.3.8 and later include the necessary OpenSSL patches. Users should upgrade to these PHP versions or ensure their OpenSSL libraries include the rsa_pkcs1_implicit_rejection fix to mitigate the vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-php-2024-2408
- Osv Schema Version
- 1.5.0
- Aliases
- ["CVE-2024-2408"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
Threat ID: 6aa005e0acd9273b49ab60a3
Added to database: 09/08/2026, 12:56:00 UTC
Last enriched: 09/08/2026, 13:28:00 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.