Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Bgehrels

#32346of 53,634
7.8Total CVSS
Vulnerabilities · 1
PT-2024-3030
7.8
2024-04-11
Php · Php · CVE-2024-2757
**Name of the Vulnerable Software and Affected Versions** PHP versions 8.3.0 through 8.3.4 **Description** The issue is related to the function `mb encode mimeheader()` in PHP, which can run endlessly for certain inputs containing long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function. **Recommendations** For PHP versions 8.3.0 through 8.3.4, update to version 8.3.5 or later to resolve the issue. As a temporary workaround, consider disabling the use of the `mb encode mimeheader()` function in applications until a patch is available.