CVE-2024-11236

A security issue was found in PHP. Uncontrolled long string inputs to the ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write. This issue may lead to an application crash or other undefined or unexpected results.

The PHP package versions as shipped with Red Hat Enterprise Linux 8 and 9 is not affected by this vulnerability as this PHP extension is not shipped with any supported PHP versions distributed by Red Hat.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.