Anolis OS update for php
| Risk | Critical |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2024-8926 CVE-2024-4577 CVE-2024-8927 |
| CWE-ID | CWE-78 CWE-254 |
| Exploitation vector | Network |
| Public exploit |
Public exploit code for vulnerability #1 is available. Vulnerability #2 is being exploited in the wild. |
| Vulnerable software |
Anolis OS Operating systems & Components / Operating system php-zip Operating systems & Components / Operating system package or component php-xml Operating systems & Components / Operating system package or component php-sodium Operating systems & Components / Operating system package or component php-soap Operating systems & Components / Operating system package or component php-snmp Operating systems & Components / Operating system package or component php-process Operating systems & Components / Operating system package or component php-pgsql Operating systems & Components / Operating system package or component php-pdo Operating systems & Components / Operating system package or component php-opcache Operating systems & Components / Operating system package or component php-odbc Operating systems & Components / Operating system package or component php-mysqlnd Operating systems & Components / Operating system package or component php-mbstring Operating systems & Components / Operating system package or component php-ldap Operating systems & Components / Operating system package or component php-intl Operating systems & Components / Operating system package or component php-gmp Operating systems & Components / Operating system package or component php-gd Operating systems & Components / Operating system package or component php-fpm Operating systems & Components / Operating system package or component php-ffi Operating systems & Components / Operating system package or component php-enchant Operating systems & Components / Operating system package or component php-embedded Operating systems & Components / Operating system package or component php-devel Operating systems & Components / Operating system package or component php-dbg Operating systems & Components / Operating system package or component php-dba Operating systems & Components / Operating system package or component php-common Operating systems & Components / Operating system package or component php-cli Operating systems & Components / Operating system package or component php-bcmath Operating systems & Components / Operating system package or component php Operating systems & Components / Operating system package or component |
| Vendor | OpenAnolis |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) OS Command Injection
EUVDB-ID: #VU97691
Risk: High
CVSSv4.0: 8.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]
CVE-ID: CVE-2024-8926
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The
vulnerability exists due to improper input validation in PHP-CGI
implementation. A remote attacker can send specially crafted HTTP
request to the application and execute arbitrary OS commands on the
system.
Install updates from vendor's repository.
Vulnerable software versionsAnolis OS: 23
php-zip: before 8.2.24-1
php-xml: before 8.2.24-1
php-sodium: before 8.2.24-1
php-soap: before 8.2.24-1
php-snmp: before 8.2.24-1
php-process: before 8.2.24-1
php-pgsql: before 8.2.24-1
php-pdo: before 8.2.24-1
php-opcache: before 8.2.24-1
php-odbc: before 8.2.24-1
php-mysqlnd: before 8.2.24-1
php-mbstring: before 8.2.24-1
php-ldap: before 8.2.24-1
php-intl: before 8.2.24-1
php-gmp: before 8.2.24-1
php-gd: before 8.2.24-1
php-fpm: before 8.2.24-1
php-ffi: before 8.2.24-1
php-enchant: before 8.2.24-1
php-embedded: before 8.2.24-1
php-devel: before 8.2.24-1
php-dbg: before 8.2.24-1
php-dba: before 8.2.24-1
php-common: before 8.2.24-1
php-cli: before 8.2.24-1
php-bcmath: before 8.2.24-1
php: before 8.2.24-1
CPE2.3- cpe:2.3:o:openanolis:anolis_os:23:*:*:*:*:*:*:*
- cpe:2.3:a:openanolis:php-zip:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-xml:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-sodium:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-soap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-snmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-process:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pgsql:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pdo:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-opcache:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-odbc:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mysqlnd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mbstring:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ldap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-intl:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-fpm:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ffi:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-enchant:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-embedded:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-devel:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dbg:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dba:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-common:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-cli:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-bcmath:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:1200
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
2) OS Command Injection
EUVDB-ID: #VU91106
Risk: Critical
CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red]
CVE-ID: CVE-2024-4577
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation in PHP-CGI implementation. A remote attacker can send specially crafted HTTP request to the application and execute arbitrary OS commands on the system.
Mitigation
Install updates from vendor's repository.
Vulnerable software versionsAnolis OS: 23
php-zip: before 8.2.24-1
php-xml: before 8.2.24-1
php-sodium: before 8.2.24-1
php-soap: before 8.2.24-1
php-snmp: before 8.2.24-1
php-process: before 8.2.24-1
php-pgsql: before 8.2.24-1
php-pdo: before 8.2.24-1
php-opcache: before 8.2.24-1
php-odbc: before 8.2.24-1
php-mysqlnd: before 8.2.24-1
php-mbstring: before 8.2.24-1
php-ldap: before 8.2.24-1
php-intl: before 8.2.24-1
php-gmp: before 8.2.24-1
php-gd: before 8.2.24-1
php-fpm: before 8.2.24-1
php-ffi: before 8.2.24-1
php-enchant: before 8.2.24-1
php-embedded: before 8.2.24-1
php-devel: before 8.2.24-1
php-dbg: before 8.2.24-1
php-dba: before 8.2.24-1
php-common: before 8.2.24-1
php-cli: before 8.2.24-1
php-bcmath: before 8.2.24-1
php: before 8.2.24-1
CPE2.3- cpe:2.3:o:openanolis:anolis_os:23:*:*:*:*:*:*:*
- cpe:2.3:a:openanolis:php-zip:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-xml:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-sodium:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-soap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-snmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-process:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pgsql:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pdo:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-opcache:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-odbc:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mysqlnd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mbstring:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ldap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-intl:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-fpm:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ffi:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-enchant:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-embedded:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-devel:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dbg:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dba:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-common:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-cli:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-bcmath:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:1200
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
3) Security features bypass
EUVDB-ID: #VU97746
Risk: Medium
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-8927
CWE-ID:
CWE-254 - Security Features
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to environment variable collision, which can lead to cgi.force_redirect bypass. A remote attacker can bypass implemented security restriction and gain unauthorized access to the application.
Install updates from vendor's repository.
Vulnerable software versionsAnolis OS: 23
php-zip: before 8.2.24-1
php-xml: before 8.2.24-1
php-sodium: before 8.2.24-1
php-soap: before 8.2.24-1
php-snmp: before 8.2.24-1
php-process: before 8.2.24-1
php-pgsql: before 8.2.24-1
php-pdo: before 8.2.24-1
php-opcache: before 8.2.24-1
php-odbc: before 8.2.24-1
php-mysqlnd: before 8.2.24-1
php-mbstring: before 8.2.24-1
php-ldap: before 8.2.24-1
php-intl: before 8.2.24-1
php-gmp: before 8.2.24-1
php-gd: before 8.2.24-1
php-fpm: before 8.2.24-1
php-ffi: before 8.2.24-1
php-enchant: before 8.2.24-1
php-embedded: before 8.2.24-1
php-devel: before 8.2.24-1
php-dbg: before 8.2.24-1
php-dba: before 8.2.24-1
php-common: before 8.2.24-1
php-cli: before 8.2.24-1
php-bcmath: before 8.2.24-1
php: before 8.2.24-1
CPE2.3- cpe:2.3:o:openanolis:anolis_os:23:*:*:*:*:*:*:*
- cpe:2.3:a:openanolis:php-zip:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-xml:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-sodium:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-soap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-snmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-process:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pgsql:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-pdo:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-opcache:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-odbc:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mysqlnd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-mbstring:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ldap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-intl:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gmp:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-gd:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-fpm:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-ffi:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-enchant:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-embedded:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-devel:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dbg:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-dba:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-common:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-cli:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php-bcmath:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:php:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:1200
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
