{
  "cveId": "CVE-2024-2757",
  "url": "https://patchblox.com/security/cve/CVE-2024-2757",
  "summary": "CVE-2024-2757 is fixed in 34 products on 1 platform, first by libapache2-mod-php8.3 8.3.6-0maysync1, released April 28, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libapache2-mod-php8.3: In PHP 8.3.* before 8.3.5, function\u00A0mb_encode_mimeheader() runs endlessly for some inputs that contain long strings o...",
  "description": "In PHP 8.3.* before 8.3.5, function\u00A0mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.",
  "published": "2024-04-28T21:15:00Z",
  "severity": "Medium",
  "epss": 0.01924,
  "epssPercentile": 0.80081,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libapache2-mod-php8.3",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "libapache2-mod-php8.3 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libapache2-mod-php8.3-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libphp8.3-embed",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "libphp8.3-embed 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libphp8.3-embed-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-bcmath",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-bcmath 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-bcmath-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-bz2",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-bz2 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-bz2-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-cgi",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-cgi 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-cgi-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-cli",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-cli 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-cli-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-common",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-common 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-common-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-curl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-curl 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-curl-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-dba",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-dba 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-dba-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-enchant",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-enchant 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-enchant-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-fpm",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-fpm 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-fpm-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-gd",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-gd 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-gd-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-gmp",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-gmp 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-gmp-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-imap",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-imap 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-imap-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-interbase",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-interbase 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-interbase-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-intl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-intl 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-intl-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-ldap",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-ldap 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-ldap-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-mbstring",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-mbstring 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-mbstring-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-mysql",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-mysql 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-mysql-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-odbc",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-odbc 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-odbc-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-opcache",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-opcache 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-opcache-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-pgsql",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-pgsql 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-pgsql-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-phpdbg",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-phpdbg 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-phpdbg-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-pspell",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-pspell 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-pspell-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-readline",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-readline 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-readline-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-snmp",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-snmp 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-snmp-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-soap",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-soap 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-soap-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-sqlite3",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-sqlite3 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-sqlite3-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-sybase",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-sybase 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-sybase-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-tidy",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-tidy 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-tidy-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-xml",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-xml 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-xml-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-xsl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-xsl 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-xsl-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    },
    {
      "platform": "linux",
      "product": "php8.3-zip",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "8.3.6-0maysync1",
      "fix": "php8.3-zip 8.3.6-0maysync1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php8.3-zip-8.3.6-0maysync1",
      "released": "2024-04-28T21:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}