ODIN | CVE Details

Products

Cyber threat intelligence platform

Threat detection and intelligence capabilities built for federal bodies

Identify, Prioritize and Mitigate darkweb risks

The Cyber Express

Cyber Security News and Magazine

Search

Hosts Exposed Buckets Exposed Files

Resources

API Documentation Platform Guide ODIN CLI Postman SDKs

Go Python JavaScript

Contact Us

[email protected]

Legal

Terms of Service Security Disclosure Policy Privacy Policy

Leading Threat Intelligence Company

LinkedIn Twitter X Youtube

LinkedIn Github Medium Twitter X Youtube

Made with ❤️ from Cupertino

© 2025 Cyble Inc. All Rights Reserved.

182.16.245.158

Summary CVE Details Raw Data

24 Dec 2025, 22:41:04 UTC

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

80/http

443/http

PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string.

80/http

443/http

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

80/http

443/http

CVE-2023-24038

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Services

22/ssh

8.5

CVE-2023-24038

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Services

22/ssh

8.5

CVE-2023-24038

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Services

22/ssh

8.5

CVE-2023-24038

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Services

22/ssh

8.5

CVE-2017-8923