Debian: CVE-2022-31631: php7.4, php8.2 -- security update

Debian: CVE-2022-31631: php7.4, php8.2 -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

02/27/2023

Created

02/28/2023

Added

02/27/2023

Modified

02/14/2025

Description

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

Solution(s)

• debian-upgrade-php7-4
• debian-upgrade-php8-2

References

• https://attackerkb.com/topics/cve-2022-31631
• CVE - 2022-31631
• DSA-5363-1