跳转到帖子

Amazon Linux 2023: CVE-2022-31631: Important priority package update for php8.1

recommended_posts

发布于
  • Members

Amazon Linux 2023: CVE-2022-31631: Important priority package update for php8.1

Severity
5
CVSS
(AV:N/AC:H/Au:N/C:N/I:N/A:C)
Published
01/05/2023
Created
02/14/2025
Added
02/14/2025
Modified
02/14/2025

Description

A flaw was found in PHP. This issue occurs due to an uncaught integer overflow in PDO::quote() of PDO_SQLite returning an improperly quoted string. With the implementation of sqlite3_snprintf(), it is possible to force the function to return a single apostrophe if the function is called on user-supplied input without any length restrictions in place.

Solution(s)

  • amazon-linux-2023-upgrade-php8-1
  • amazon-linux-2023-upgrade-php8-1-bcmath
  • amazon-linux-2023-upgrade-php8-1-bcmath-debuginfo
  • amazon-linux-2023-upgrade-php8-1-cli
  • amazon-linux-2023-upgrade-php8-1-cli-debuginfo
  • amazon-linux-2023-upgrade-php8-1-common
  • amazon-linux-2023-upgrade-php8-1-common-debuginfo
  • amazon-linux-2023-upgrade-php8-1-dba
  • amazon-linux-2023-upgrade-php8-1-dba-debuginfo
  • amazon-linux-2023-upgrade-php8-1-dbg
  • amazon-linux-2023-upgrade-php8-1-dbg-debuginfo
  • amazon-linux-2023-upgrade-php8-1-debuginfo
  • amazon-linux-2023-upgrade-php8-1-debugsource
  • amazon-linux-2023-upgrade-php8-1-devel
  • amazon-linux-2023-upgrade-php8-1-embedded
  • amazon-linux-2023-upgrade-php8-1-embedded-debuginfo
  • amazon-linux-2023-upgrade-php8-1-enchant
  • amazon-linux-2023-upgrade-php8-1-enchant-debuginfo
  • amazon-linux-2023-upgrade-php8-1-ffi
  • amazon-linux-2023-upgrade-php8-1-ffi-debuginfo
  • amazon-linux-2023-upgrade-php8-1-fpm
  • amazon-linux-2023-upgrade-php8-1-fpm-debuginfo
  • amazon-linux-2023-upgrade-php8-1-gd
  • amazon-linux-2023-upgrade-php8-1-gd-debuginfo
  • amazon-linux-2023-upgrade-php8-1-gmp
  • amazon-linux-2023-upgrade-php8-1-gmp-debuginfo
  • amazon-linux-2023-upgrade-php8-1-intl
  • amazon-linux-2023-upgrade-php8-1-intl-debuginfo
  • amazon-linux-2023-upgrade-php8-1-ldap
  • amazon-linux-2023-upgrade-php8-1-ldap-debuginfo
  • amazon-linux-2023-upgrade-php8-1-mbstring
  • amazon-linux-2023-upgrade-php8-1-mbstring-debuginfo
  • amazon-linux-2023-upgrade-php8-1-mysqlnd
  • amazon-linux-2023-upgrade-php8-1-mysqlnd-debuginfo
  • amazon-linux-2023-upgrade-php8-1-odbc
  • amazon-linux-2023-upgrade-php8-1-odbc-debuginfo
  • amazon-linux-2023-upgrade-php8-1-opcache
  • amazon-linux-2023-upgrade-php8-1-opcache-debuginfo
  • amazon-linux-2023-upgrade-php8-1-pdo
  • amazon-linux-2023-upgrade-php8-1-pdo-debuginfo
  • amazon-linux-2023-upgrade-php8-1-pgsql
  • amazon-linux-2023-upgrade-php8-1-pgsql-debuginfo
  • amazon-linux-2023-upgrade-php8-1-process
  • amazon-linux-2023-upgrade-php8-1-process-debuginfo
  • amazon-linux-2023-upgrade-php8-1-soap
  • amazon-linux-2023-upgrade-php8-1-soap-debuginfo
  • amazon-linux-2023-upgrade-php8-1-tidy
  • amazon-linux-2023-upgrade-php8-1-tidy-debuginfo
  • amazon-linux-2023-upgrade-php8-1-xml
  • amazon-linux-2023-upgrade-php8-1-xml-debuginfo

References

  • https://attackerkb.com/topics/cve-2022-31631
  • CVE - 2022-31631
  • https://alas.aws.amazon.com/AL2023/ALAS-2023-081.html
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…