Wind River Support Network

HomeDefectsLIN1021-12410

Fixed

LIN1021-12410 : Security Advisory - php - CVE-2024-8929

Created: Nov 21, 2024 Updated: May 25, 2025

Resolved Date: May 21, 2025

Found In Version: 10.21.20.1

Fix Version: 10.21.20.25

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

https://nvd.nist.gov/vuln/detail/CVE-2024-8929

CVEs

CVE-2024-8929