跳转到帖子

Ubuntu: (Multiple Advisories) (CVE-2022-31631): PHP vulnerability

recommended_posts

发布于
  • Members

Ubuntu: (Multiple Advisories) (CVE-2022-31631): PHP vulnerability

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
01/11/2023
Created
01/25/2023
Added
01/24/2023
Modified
02/14/2025

Description

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

Solution(s)

  • ubuntu-pro-upgrade-libapache2-mod-php7-0
  • ubuntu-pro-upgrade-libapache2-mod-php7-2
  • ubuntu-pro-upgrade-libapache2-mod-php7-4
  • ubuntu-pro-upgrade-libapache2-mod-php8-0
  • ubuntu-pro-upgrade-libapache2-mod-php8-1
  • ubuntu-pro-upgrade-php7-0
  • ubuntu-pro-upgrade-php7-0-cgi
  • ubuntu-pro-upgrade-php7-0-cli
  • ubuntu-pro-upgrade-php7-0-fpm
  • ubuntu-pro-upgrade-php7-0-sqlite3
  • ubuntu-pro-upgrade-php7-0-zip
  • ubuntu-pro-upgrade-php7-2
  • ubuntu-pro-upgrade-php7-2-cgi
  • ubuntu-pro-upgrade-php7-2-cli
  • ubuntu-pro-upgrade-php7-2-sqlite3
  • ubuntu-pro-upgrade-php7-4
  • ubuntu-pro-upgrade-php7-4-cgi
  • ubuntu-pro-upgrade-php7-4-cli
  • ubuntu-pro-upgrade-php7-4-sqlite3
  • ubuntu-pro-upgrade-php8-1
  • ubuntu-pro-upgrade-php8-1-cgi
  • ubuntu-pro-upgrade-php8-1-cli
  • ubuntu-pro-upgrade-php8-1-sqlite3

References

  • https://attackerkb.com/topics/cve-2022-31631
  • CVE - 2022-31631
  • CVE-2022-31631
  • USN-5818-1
  • USN-5905-1
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…