CVE-2024-11236

Summary

CVE-2024-11236 is a vulnerability affecting PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, and 8.3.* before 8.3.14. Maliciously crafted long string inputs to the ldap_escape() function on 32-bit systems can lead to an integer overflow, resulting in an out-of-bounds write. This issue could potentially be exploited to execute arbitrary code or cause a denial-of-service condition. System administrators are advised to update their PHP installations to the latest versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.