{"metadata": {"vulnerability": "cve-2024-2408", "count": 55, "kinds": {"milestone": 11, "sighting": 1, "kev": 0, "other": 43}}, "data": [{"timestamp": "2023-07-19T00:00:00Z", "date_only": false, "value": "2023-07-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-07-24T00:00:00Z", "date_only": false, "value": "2023-07-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-31T00:00:00Z", "date_only": false, "value": "2023-07-31T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-07-31T00:00:00Z", "date_only": false, "value": "2023-07-31T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-10-24T00:00:00Z", "date_only": false, "value": "2023-10-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-11-07T00:00:00Z", "date_only": false, "value": "2023-11-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-12-18T00:00:00Z", "date_only": false, "value": "2023-12-18T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-12-18T00:00:00Z", "date_only": false, "value": "2023-12-18T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-12-18T00:00:00Z", "date_only": false, "value": "2023-12-18T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "document.tracking.generator.date"}, {"timestamp": "2023-12-18T00:00:00Z", "date_only": false, "value": "2023-12-18T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-12-19T09:57:28Z", "date_only": false, "value": "2023-12-19T09:57:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-12-19T09:57:28Z", "date_only": false, "value": "2023-12-19T09:57:28+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-12-19T09:57:28Z", "date_only": false, "value": "2023-12-19T09:57:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-03-12T21:18:50.326Z", "date_only": false, "value": "2024-03-12T21:18:50.326Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-2408", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-03-19T00:00:00Z", "date_only": false, "value": "2024-03-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2024-04-02T05:02:52.993Z", "date_only": false, "value": "2024-04-02T05:02:52.993624Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-2408", "record": "GSD-2024-2408", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-02T07:00:00Z", "date_only": false, "value": "2024-06-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-07T00:00:00Z", "date_only": false, "value": "2024-06-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2024-06-09T19:00:00Z", "date_only": false, "value": "2024-06-09T19:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / php", "record": "cve-2024-2408", "field": "containers.cna.datePublic"}, {"timestamp": "2024-06-09T19:55:51.625Z", "date_only": false, "value": "2024-06-09T19:55:51.625Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-2408", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-09T20:15:00Z", "date_only": false, "value": "2024-06-09T20:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-2408", "record": "UBUNTU-CVE-2024-2408", "field": "published"}, {"timestamp": "2024-06-09T20:15:09.270Z", "date_only": false, "value": "2024-06-09T20:15:09.270", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2408", "record": "FKIE_CVE-2024-2408", "field": "published"}, {"timestamp": "2024-06-09T22:00:00Z", "date_only": false, "value": "2024-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-09T22:00:00Z", "date_only": false, "value": "2024-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-09T22:00:00Z", "date_only": false, "value": "2024-06-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-06-12T07:31:53.103Z", "date_only": false, "value": "2024-06-12T07:31:53.103Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PHP-2024-2408", "record": "BIT-PHP-2024-2408", "field": "published"}, {"timestamp": "2024-06-13T04:06:08.508Z", "date_only": false, "value": "2024-06-13T04:06:08.508Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / php", "record": "cve-2024-2408", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-24T22:00:00Z", "date_only": false, "value": "2024-06-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-06-30T07:00:00Z", "date_only": false, "value": "2024-06-30T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-30T07:00:00Z", "date_only": false, "value": "2024-06-30T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-16T15:46:27Z", "date_only": false, "value": "2024-12-16T15:46:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-12-16T15:46:27Z", "date_only": false, "value": "2024-12-16T15:46:27+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-16T15:46:27Z", "date_only": false, "value": "2024-12-16T15:46:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_7877", "record": "RHSA-2023_7877", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-31T11:38:57.610Z", "date_only": false, "value": "2025-01-31T11:38:57.610+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1324", "record": "WID-SEC-W-2024-1324", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-14T13:58:06.996Z", "date_only": false, "value": "2025-03-14T13:58:06.996571Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2408", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-14T13:58:06.996Z", "date_only": false, "value": "2025-03-14T13:58:06.996571Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2408", "record": "FKIE_CVE-2024-2408", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-14T13:58:57.829Z", "date_only": false, "value": "2025-03-14T13:58:57.829Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2408", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T14:45:16Z", "date_only": false, "value": "2025-03-14T14:45:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7559", "record": "CVE-2024-2408", "field": "creation_timestamp", "uuid": "76405b5f-fd84-490a-89c7-2bad3aef8d6e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2408\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request:  https://github.com/openssl/openssl/pull/13817  (rsa_pkcs1_implicit_rejection). These changes are part of OpenSSL 3.2 and have also been backported to stable versions of various Linux distributions, as well as to the PHP builds provided for Windows since the previous release. All distributors and builders should ensure that this version is used to prevent PHP from being vulnerable.\n\nPHP Windows builds for the versions\u00a08.1.29,\u00a08.2.20 and\u00a08.3.8 and above include OpenSSL patches that fix the vulnerability.\n\ud83d\udccf Published: 2024-06-09T19:55:51.625Z\n\ud83d\udccf Modified: 2025-03-14T13:58:57.829Z\n\ud83d\udd17 References:\n1. https://github.com/php/php-src/security/advisories/GHSA-hh26-4ppw-5864\n2. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "url": "https://t.me/DarkWebInformer_CVEAlerts/7559"}, {"timestamp": "2025-03-21T18:03:45.831Z", "date_only": false, "value": "2025-03-21T18:03:45.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-2408", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-21T18:03:45.831Z", "date_only": false, "value": "2025-03-21T18:03:45.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-2408", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-11T13:54:10.823Z", "date_only": false, "value": "2025-08-11T13:54:10.823Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-LIBPHP-2024-2408", "record": "BIT-LIBPHP-2024-2408", "field": "published"}, {"timestamp": "2026-02-19T01:51:16Z", "date_only": false, "value": "2026-02-19T01:51:16.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-19T01:51:16Z", "date_only": false, "value": "2026-02-19T01:51:16.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-21T03:10:18.241Z", "date_only": false, "value": "2026-02-21T03:10:18.241Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-2408", "record": "MSRC_CVE-2024-2408", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T07:47:54Z", "date_only": false, "value": "2026-04-22T07:47:54Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-2408", "record": "UBUNTU-CVE-2024-2408", "field": "modified"}, {"timestamp": "2026-06-17T07:24:28.497Z", "date_only": false, "value": "2026-06-17T07:24:28.497", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2408", "record": "FKIE_CVE-2024-2408", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-LIBPHP-2024-2408", "record": "BIT-LIBPHP-2024-2408", "field": "modified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PHP-2024-2408", "record": "BIT-PHP-2024-2408", "field": "modified"}, {"timestamp": "2026-09-20T11:34:29Z", "date_only": false, "value": "2026-09-20T11:34:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:34:29Z", "date_only": false, "value": "2026-09-20T11:34:29Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2023:7877", "record": "RHSA-2023:7877", "field": "document.tracking.current_release_date"}]}