Description
In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 14 | | | 8.4.10-1 |
debian 12 | | =8.2.10-1 || =8.2.10-2 || =8.2.12-1 || =8.2.16-1 || =8.2.16-2 || =8.2.17-1 || =8.2.18-1 || =8.2.18-1~deb12u1 || =8.2.20-1~deb12u1 || =8.2.20-2 || =8.2.20-3 || =8.2.21-1 || =8.2.23-1 || =8.2.24-1 || =8.2.24-1~deb12u1 || =8.2.26-1~deb12u1 || =8.2.26-4 || =8.2.27-1 || =8.2.28-1~deb12u1 || =8.2.5-2 || =8.2.7-1 || =8.2.7-1.1 || =8.2.7-1.2 || =8.2.7-1~deb12u1 || >=0 <8.2.29-1~deb12u1 | 8.2.29-1~deb12u1 |
debian 13 | | | 8.4.10-1 |
 rpm rhel10 | | - | - |
rpm rhel6 | | - | - |
rpm rhel7 | | - | - |
rpm rhel8 | | <0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f | 0:7.4.33-3.module+el8.10.0+23902+d3c8dd8f |
rpm rhel9 | | - | - |
 packagist | | >=8.1.0 <8.1.33 || >=8.2.0 <8.2.29 || >=8.3.0 <8.3.23 || >=8.4.0 <8.4.10 | 8.1.33, 8.2.29, 8.3.23, 8.4.10 |
