Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3096: The vulnerability allows a remote attacker to bypass authentication process. The vulnerability exists due to an error in within the password_verify() function, which can erroneously return true. A remote attacker can bypass implemented authentication based on the vulnerable function and gain unauthorized access to the web application. CVE-2024-2756: The vulnerability allows a remote attacker to bypass implemented security restrictions. The vulnerability exists due to the way PHP handles HTTP variable names. A remote attacker can set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications. Note, the vulnerability exists due to incomplete fix for #VU67756 (CVE-2022-31629).
Fixed packages 56
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | php8.1 | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-bcmath | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-bcmath-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-cli | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-cli-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-common | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-common-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-dba | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-dba-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-dbg | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-dbg-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-debugsource | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-devel | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-embedded | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-embedded-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-enchant | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-enchant-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-ffi | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-ffi-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-fpm | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-fpm-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-gd | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-gd-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-gmp | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-gmp-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-intl | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-intl-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-ldap | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-ldap-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-mbstring | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-mbstring-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-mysqlnd | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-mysqlnd-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-odbc | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-odbc-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-opcache | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-opcache-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pdo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pdo-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pgsql | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pgsql-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-process | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-process-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pspell | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-pspell-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-snmp | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-snmp-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-soap | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-soap-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-tidy | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-tidy-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-xml | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-xml-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-zip | 0:8.1.28-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.1-zip-debuginfo | 0:8.1.28-1.amzn2023.0.1 |
Vulnerabilities 2
-
Medium 6.5CVE-2024-2756 EPSS 38%
__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.
-
Medium 6.5
PHP function password_verify can erroneously return true when argument contains NUL
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.