Exploit for #VU78978 Buffer overflow in PHP

Vulnerability identifier: #VU78978

Vulnerability risk: Critical

CVSSv4.0: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:A/U:Red]

CVE-ID: CVE-2023-3824

CWE-ID: CWE-119

Exploitation vector: Network

Exploits in database: 3

• February 7, 2025
  • poc-cve-2023-3824 (PoC CVE 2023-3824) [Github]
• October 17, 2024
  • CVE-2023-3824 (Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential exec [Github]
• July 19, 2024
  • CVE-2023-3824 (CVE-2023-3824) [Github]

Vulnerable software:
PHP
Universal components / Libraries / Scripting languages

Vendor: PHP Group