CVE-2024-2757

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-2757
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2757.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-2757
Aliases
Related
Published
2024-04-29T04:15:08Z
Modified
2024-10-08T04:12:03.266392Z
Summary
[none]
Details

In PHP 8.3.* before 8.3.5, function mbencodemimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function. 

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed