Threats tagged 'bit-php-2024-8929'

A heap buffer over-read vulnerability (CVE-2024-8929) exists in the mysqlnd extension of PHP, allowing a hostile MySQL server to cause the PHP client to leak partial heap contents. This may disclose data from other SQL requests or other users on the same server. The vulnerability affects multiple PHP versions prior to fixed releases. Red Hat has released official patches addressing this issue in their php:7.4 module for Red Hat Enterprise Linux 8. The security impact is rated as moderate.