NetSight
medium5.8

CVE-2024-8929

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap …

Impact

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Affected products

VendorProductAffected versions
PhpPhp
from 8.1.0 before 8.1.31
from 8.2.0 before 8.2.26
from 8.3.0 before 8.3.14

Weakness classification

References