超危
PHP-CGI代码执行漏洞
2024-06-09 19:42:36 公开 ，2026-02-28 01:33:53 更新
- CISA KEV
- 关键漏洞
- 勒索软件漏洞
- APT漏洞
- CWE Top 25 (2023)
- 无需认证
- 远程
- 公开PoC
- 开源组件漏洞
- CWE Top 25 (2024)
- 2025两高一弱漏洞
- CWEs：
- CWE-78 （OS Command Injection）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：是技术影响评估：全部 2024-06-15 11:55:28
风险信息
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 9.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 9.8
- CVSS v4.0 向量
- AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- CVSS v4.0 风险值
- 9.3
详细信息
- 漏洞类型
- 操作系统命令注入
- 漏洞描述
- 在PHP 8.1.* -8.1.29版本、8.2.* -8.2.20版本、8.3.* -8.3.8版本中，在Windows上使用Apache和PHP-CGI时，如果系统设置为使用某些代码页，则Windows可能会使用Best-Fit行为来替换Win32 API函数的命令行中的字符。PHP CGI模块可能会将这些字符误解为PHP选项，这可能允许恶意用户将选项传递给正在运行的PHP二进制文件，从而泄露脚本的源代码、在服务器上运行任意PHP代码等。此漏洞是CVE-2012-1823的补丁绕过。
- 修复建议
- 升级到PHP网站提供的最新版本的PHP（8.1.29，8.2.20，8.3.8或更高版本）。参考链接： https://www.php.net/ChangeLog-8.php
参考链接
- http://www.openwall.com/lists/oss-security/2024/06/07/1
CVE · Release Notes · Mailing List
- https://arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/
CVE · Third Party Advisory · Exploit
- https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html
CVE · Third Party Advisory
- https://cert.be/en/advisory/warning-php-remote-code-execution-patch-immediately
CVE · Third Party Advisory
- https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/
CVE · Third Party Advisory · Exploit
- https://github.com/11whoami99/CVE-2024-4577
CVE · Exploit
- https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv
CVE · Broken Link
- https://github.com/rapid7/metasploit-framework/pull/19247
CVE · Exploit
- https://github.com/watchtowrlabs/CVE-2024-4577
CVE · Third Party Advisory · Exploit
- https://github.com/xcanwin/CVE-2024-4577-PHP-RCE
CVE · Third Party Advisory · Exploit
- https://isc.sans.edu/diary/30994
CVE · Third Party Advisory · Exploit
- https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/
CVE · Third Party Advisory · Exploit
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/
CVE · Mailing List · Third Party Advisory
- https://www.imperva.com/blog/imperva-protects-against-critical-php-vulnerability-cve-2024-4577/
CVE · Third Party Advisory
- https://www.php.net/ChangeLog-8.php#8.1.29
CVE · Release Notes
- https://www.php.net/ChangeLog-8.php#8.2.20
CVE · Release Notes
- https://www.php.net/ChangeLog-8.php#8.3.8
CVE · Release Notes
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/
CVE · Mailing List · Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240621-0008/
CVE · Third Party Advisory
- https://github.com/php/php-src/commit/4dd9a36c165974c84c4217aa41849b70a9fc19c9
Snyk
- https://github.com/projectdiscovery/nuclei-templates/blob/master/http/cves/2024/CVE-2024-4577.yaml
Snyk
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://www.exploit-db.com/exploits/52047
Snyk
- https://osv.dev/vulnerability/CGA-gvwm-h3qq-8679
OSV
- https://osv.dev/vulnerability/CGA-84j3-w824-wv4x
OSV
- https://osv.dev/vulnerability/BIT-php-2024-4577
OSV
- https://osv.dev/vulnerability/CVE-2024-4577
OSV
- https://www.vicarius.io/vsociety/posts/php-cgi-argument-injection-to-rce-cve-2024-4577
OSV · Third Party Advisory · Exploit
- https://www.vicarius.io/vsociety/posts/php-cgi-os-command-injection-vulnerability-cve-2024-4577
OSV · Third Party Advisory · Exploit
- https://osv.dev/vulnerability/BIT-php-min-2024-4577
OSV
- https://blog.talosintelligence.com/new-persistent-attacks-japan/
OSV · Exploit · Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-4577
OSV
- https://osv.dev/vulnerability/BIT-libphp-2024-4577
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4577
OSV · US Government Resource