CVE-2024-36626
📋 TL;DR
A NULL pointer dereference vulnerability exists in PrestaShop 8.1.4's math_round function in Tools.php. This vulnerability could cause the application to crash when processing certain malformed input. All PrestaShop 8.1.4 installations using the affected function are potentially vulnerable.
💻 Affected Systems
- PrestaShop
📦 What is this software?
Prestashop by Prestashop
⚠️ Risk & Real-World Impact
Worst Case
Application crashes leading to denial of service, potentially disrupting e-commerce operations and causing revenue loss.
Likely Case
Application instability or crashes when processing specific malformed data through the math_round function.
If Mitigated
Minimal impact with proper input validation and error handling in place.
🎯 Exploit Status
Exploitation requires triggering the math_round function with specific input. The GitHub commit shows the exact vulnerable code.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Fixed in commit 20fa542294da2cfa034a48041e292acaed0c2a7f and later versions
Vendor Advisory: https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f
Restart Required: No
Instructions:
1. Update to the latest PrestaShop version. 2. Apply the specific commit 20fa542294da2cfa034a48041e292acaed0c2a7f. 3. Replace the vulnerable Tools.php file with the patched version.
🔧 Temporary Workarounds
Input Validation Workaround
allAdd input validation before calling math_round function to ensure parameters are not NULL
Modify code to check if input parameters are valid before calling math_round
🧯 If You Can't Patch
- Implement web application firewall rules to block malformed input to affected endpoints
- Disable or restrict access to functionality that uses the math_round function
🔍 How to Verify
Check if Vulnerable:
Check if your PrestaShop version is 8.1.4 and review the Tools.php file at line 1774 for the vulnerable math_round implementationCheck Version:
Check PrestaShop version in configuration files or admin panelVerify Fix Applied:
Verify that the math_round function in Tools.php includes proper NULL checks as shown in the fix commit📡 Detection & Monitoring
Log Indicators:
- Application crashes or segmentation faults in error logs
- Unusual NULL pointer exceptions in application logs
Network Indicators:
- HTTP 500 errors from PrestaShop endpoints
- Unusual traffic patterns to math_round related functionality
SIEM Query:
source="prestashop_logs" AND ("NULL pointer" OR "segmentation fault" OR "math_round")