USN-7157-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-7157-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7157-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/USN-7157-1
Upstream
Related
Published
2024-12-13T16:59:11.108187Z
Modified
2025-09-08T16:40:30Z
Summary
php7.4, php8.1, php8.3 vulnerabilities
Details

It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-printable decode filters. An attacker could possibly use this issue to expose sensitive information or cause a crash. (CVE-2024-11233)

It was discovered that PHP incorrectly handled certain HTTP requests. An attacker could possibly use this issue to performing arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user. (CVE-2024-11234)

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2024-11236, CVE-2024-8932)

It was discovered that PHP incorrectly handled certain MySQL requests. An attacker could possibly use this issue to cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server. (CVE-2024-8929)

References

Affected packages

Ubuntu:20.04:LTS / php7.4

Package

Name
php7.4
Purl
pkg:deb/ubuntu/php7.4@7.4.3-4ubuntu2.26?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.4.3-4ubuntu2.26

Affected versions

7.*

7.4.3-4build1
7.4.3-4build2
7.4.3-4ubuntu1
7.4.3-4ubuntu1.1
7.4.3-4ubuntu2.2
7.4.3-4ubuntu2.4
7.4.3-4ubuntu2.5
7.4.3-4ubuntu2.6
7.4.3-4ubuntu2.7
7.4.3-4ubuntu2.8
7.4.3-4ubuntu2.9
7.4.3-4ubuntu2.10
7.4.3-4ubuntu2.11
7.4.3-4ubuntu2.12
7.4.3-4ubuntu2.13
7.4.3-4ubuntu2.15
7.4.3-4ubuntu2.16
7.4.3-4ubuntu2.17
7.4.3-4ubuntu2.18
7.4.3-4ubuntu2.19
7.4.3-4ubuntu2.20
7.4.3-4ubuntu2.22
7.4.3-4ubuntu2.23
7.4.3-4ubuntu2.24

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libapache2-mod-php7.4",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "libphp7.4-embed",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-bcmath",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-bz2",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-cgi",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-cli",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-common",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-curl",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-dba",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-dev",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-enchant",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-fpm",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-gd",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-gmp",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-imap",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-interbase",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-intl",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-json",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-ldap",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-mbstring",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-mysql",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-odbc",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-opcache",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-pgsql",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-phpdbg",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-pspell",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-readline",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-snmp",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-soap",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-sqlite3",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-sybase",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-tidy",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-xml",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-xmlrpc",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-xsl",
            "binary_version": "7.4.3-4ubuntu2.26"
        },
        {
            "binary_name": "php7.4-zip",
            "binary_version": "7.4.3-4ubuntu2.26"
        }
    ]
}

Ubuntu:22.04:LTS / php8.1

Package

Name
php8.1
Purl
pkg:deb/ubuntu/php8.1@8.1.2-1ubuntu2.20?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.1.2-1ubuntu2.20

Affected versions

8.*

8.1.0~rc4-1ubuntu2
8.1.0-1
8.1.2-1ubuntu1
8.1.2-1ubuntu2
8.1.2-1ubuntu2.1
8.1.2-1ubuntu2.2
8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.4
8.1.2-1ubuntu2.5
8.1.2-1ubuntu2.6
8.1.2-1ubuntu2.8
8.1.2-1ubuntu2.9
8.1.2-1ubuntu2.10
8.1.2-1ubuntu2.11
8.1.2-1ubuntu2.13
8.1.2-1ubuntu2.14
8.1.2-1ubuntu2.15
8.1.2-1ubuntu2.17
8.1.2-1ubuntu2.18
8.1.2-1ubuntu2.19

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libapache2-mod-php7.4",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "libapache2-mod-php8.0",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "libapache2-mod-php8.1",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "libphp8.1-embed",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-bcmath",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-bz2",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-cgi",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-cli",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-common",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-curl",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-dba",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-dev",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-enchant",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-fpm",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-gd",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-gmp",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-imap",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-interbase",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-intl",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-ldap",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-mbstring",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-mysql",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-odbc",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-opcache",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-pgsql",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-phpdbg",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-pspell",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-readline",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-snmp",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-soap",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-sqlite3",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-sybase",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-tidy",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-xml",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-xsl",
            "binary_version": "8.1.2-1ubuntu2.20"
        },
        {
            "binary_name": "php8.1-zip",
            "binary_version": "8.1.2-1ubuntu2.20"
        }
    ]
}

Ubuntu:24.04:LTS / php8.3

Package

Name
php8.3
Purl
pkg:deb/ubuntu/php8.3@8.3.6-0ubuntu0.24.04.3?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.3.6-0ubuntu0.24.04.3

Affected versions

8.*

8.3.0-1
8.3.0-1ubuntu1
8.3.4-1
8.3.4-1build1
8.3.6-0maysync1
8.3.6-0ubuntu0.24.04.1
8.3.6-0ubuntu0.24.04.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libapache2-mod-php8.3",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "libphp8.3-embed",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-bcmath",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-bz2",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-cgi",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-cli",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-common",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-curl",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-dba",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-dev",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-enchant",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-fpm",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-gd",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-gmp",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-imap",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-interbase",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-intl",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-ldap",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-mbstring",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-mysql",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-odbc",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-opcache",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-pgsql",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-phpdbg",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-pspell",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-readline",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-snmp",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-soap",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-sqlite3",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-sybase",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-tidy",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-xml",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-xsl",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        },
        {
            "binary_name": "php8.3-zip",
            "binary_version": "8.3.6-0ubuntu0.24.04.3"
        }
    ]
}