PT-2024-4988 · Php+2 · Php+2

Tianstcht

·

Published

2024-06-06

·

Updated

2026-03-10

·

CVE-2024-5585

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: PHP versions 8.1.* before 8.1.29 PHP versions 8.2.* before 8.2.20 PHP versions 8.3.* before 8.3.8
Description: The issue arises from insufficient escaping when using the proc open() function with array syntax, allowing a malicious user to supply arguments that execute arbitrary commands in the Windows shell. This is due to the lack of measures to neutralize special elements used in the command. The estimated number of potentially affected devices worldwide is around 25,304,775, mainly distributed in the United States, China, and other countries.
Recommendations: For PHP versions 8.1.* before 8.1.29, update to version 8.1.29 or later to resolve the issue. For PHP versions 8.2.* before 8.2.20, update to version 8.2.20 or later to resolve the issue. For PHP versions 8.3.* before 8.3.8, update to version 8.3.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of the proc open() function until a patch is available. Avoid using the proc open() function with untrusted input to minimize the risk of exploitation.

Exploit

Fix

Improper Encoding or Escaping of Output

OS Command Injection

Weakness Enumeration

Related Identifiers

ALT-PU-2024-13731
ALT-PU-2024-16480
ALT-PU-2024-8853
ALT-PU-2024-8859
ALT-PU-2024-8861
ALT-PU-2024-9191
ALT-PU-2024-9193
AZL-42427
AZL-42439
BDU:2024-05512
BIT-LIBPHP-2024-5585
BIT-PHP-2024-5585
BIT-PHP-MIN-2024-5585
CVE-2024-5585
GHSA-9FCC-425M-G385

Affected Products

Alt Linux
Php
Red Os