Threats Tagged 'cve-2024-11234'

A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection risks. These issues collectively pose moderate security risks such as account takeover and information leakage. The update is rated moderate severity by Red Hat Product Security.

A security update for PHP 7.4 on Red Hat Enterprise Linux 8 addresses multiple vulnerabilities including heap buffer over-reads, CRLF injection, header parsing issues, NULL pointer dereference, buffer overflow, and information disclosure. These issues affect various PHP components such as mysqlnd, stream wrappers, pgsql extension, SOAP extension, and image processing functions. The update is rated as having a moderate security impact. Detailed CVE references are provided for each vulnerability. The update is available through Red Hat advisories and includes fixes for all listed issues.