CVE-2023-3247

Description

In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce.

How to fix CVE-2023-3247

To remediate CVE-2023-3247, upgrade the affected package to a fixed version below.

• —upgrade to 8.0.29 or later
• —upgrade to 8.0.29 or later
• —upgrade to 8.0.29 or later
• —upgrade to 7.3.31-1~deb10u4 or later
• —upgrade to 7.4.33-1+deb11u4 or later
• —upgrade to 7.4.33-1+deb11u4 or later
• —upgrade to 8.2.7-1~deb12u1 or later
• —upgrade to 8.2.7-1~deb12u1 or later

Is CVE-2023-3247 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (8)

• >= 8.0.0, < 8.0.29, >= 8.1.0, < 8.1.20, >= 8.2.0, < 8.2.7
• >= 8.0.0, < 8.0.29, >= 8.1.0, < 8.1.20, >= 8.2.0, < 8.2.7
• >= 8.0.0, < 8.0.29, >= 8.1.0, < 8.1.20, >= 8.2.0, < 8.2.7
• from 0, < 7.3.31-1~deb10u4
• from 0, < 7.4.33-1+deb11u4
• from 0, < 7.4.33-1+deb11u4
• from 0, < 8.2.7-1~deb12u1
• from 0, < 8.2.7-1~deb12u1

CVSS scores

References (3)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2023-3247
• WEBgithub.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw
• WEBnvd.nist.gov/vuln/detail/CVE-2023-3247