Lucene search
F5F5:K19150034HistoryJul 12, 2022 - 12:00 a.m.
K19150034 : PHP vulnerabilities CVE-2022-31625, CVE-2022-31626
2022-07-1200:00:00
my.f5.com
223
Security Advisory Description
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
nessus
nessus
SUSE SLES12 Security Update : php74 (SUSE-SU-2022:2161-1)
2022-06-24 00:00:00
Amazon Linux 2 : php (ALASPHP8.0-2023-006)
2023-09-13 00:00:00
SUSE SLES15 Security Update : php7 (SUSE-SU-2022:2275-1)
2022-07-07 00:00:00
suse
suse
Security update for php7 (important)
2022-06-24 00:00:00
Security update for php7 (important)
2022-07-05 00:00:00
Security update for php8 (important)
2022-07-06 00:00:00
osv
osv
php7.4 - security update
2022-07-08 00:00:00
php7.2, php7.4, php8.0, php8.1 vulnerabilities
2022-06-15 11:25:17
php7.2 regression
2022-07-07 21:53:43
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2275-1)
2022-07-06 00:00:00
Ubuntu: Security Advisory (USN-5479-2)
2022-08-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2161-1)
2022-06-24 00:00:00
ubuntu
ubuntu
PHP regression
2022-07-07 00:00:00
PHP vulnerabilities
2022-07-04 00:00:00
PHP vulnerabilities
2022-06-15 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2022-06-19 00:30:41
slackware
slackware
[slackware-security] php
2022-06-13 21:14:24
fedora
fedora
[SECURITY] Fedora 35 Update: php-8.0.20-1.fc35
2022-06-17 01:19:38
[SECURITY] Fedora 36 Update: php-8.1.7-1.fc36
2022-06-17 01:14:59
debian
debian
[SECURITY] [DSA 5179-1] php7.4 security update
2022-07-08 19:27:23
[SECURITY] [DLA 3243-1] php7.3 security update
2022-12-15 18:33:17
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.1 version 8.1.7-alt1
2022-06-22 00:00:00
Security fix for the ALT Linux 10 package php7 version 7.4.30-alt1
2022-06-22 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 8.0.20-alt1
2022-06-21 00:00:00
redhat
redhat
(RHSA-2022:5491) Important: rh-php73-php security and bug fix update
2022-07-04 07:07:16
(RHSA-2022:5471) Important: php:7.4 security update
2022-06-30 21:30:51
(RHSA-2022:5904) Important: php security update
2022-08-04 09:53:47
oraclelinux
oraclelinux
php:8.0 security update
2022-07-04 00:00:00
php:7.4 security update
2022-07-04 00:00:00
php security update
2022-08-04 00:00:00
debiancve
debiancve
CVE-2022-31626
2022-06-16 06:15:08
CVE-2022-31625
2022-06-16 06:15:08
nvd
nvd
CVE-2022-31625
2022-06-16 06:15:08
CVE-2022-31626
2022-06-16 06:15:08
cbl_mariner
cbl_mariner
CVE-2022-31625 affecting package php 7.4.14-3
2024-07-05 21:08:40
CVE-2022-31626 affecting package php 7.4.14-3
2024-07-05 21:08:40
cloudlinux
cloudlinux
Fixed CVE-2022-31625 in php
2022-07-18 19:05:49
cvelist
cvelist
CVE-2022-31625 Freeing unallocated memory in php_pgsql_free_params()
2022-06-06 00:00:00
CVE-2022-31626 mysqlnd/pdo password buffer overflow
2022-06-06 00:00:00
almalinux
almalinux
Moderate: php:7.4 security update
2022-08-24 00:00:00
ALSA-2022:5468: php:8.0 security update (Important)
2022-06-30 00:00:00
Important: php security update
2022-08-04 00:00:00
rocky
rocky
php:7.4 security update
2022-08-24 15:03:01
php security update
2022-08-04 09:53:47
php:8.0 security update
2022-06-30 21:27:49
alpinelinux
alpinelinux
CVE-2022-31625
2022-06-16 06:15:08
CVE-2022-31626
2022-06-16 06:15:08
prion
prion
Remote code execution
2022-06-16 06:15:00
Denial of service
2022-06-16 06:15:00
cve
cve
CVE-2022-31626
2022-06-16 06:15:08
CVE-2022-31625
2022-06-16 06:15:08
redhatcve
redhatcve
CVE-2022-31626
2022-06-20 05:01:27
CVE-2022-31625
2022-06-20 05:01:17
githubexploit
githubexploit
Exploit for Classic Buffer Overflow in Php
2022-12-06 16:19:03
thn
thn
Resolving Availability vs. Security, a Constant Conflict in IT
2022-08-05 10:20:00
veracode
veracode
Buffer Overflow
2022-06-13 02:07:10
Remote Code Execution (RCE)
2022-06-13 01:57:35
ubuntucve
ubuntucve
CVE-2022-31626
2022-06-13 00:00:00
CVE-2022-31625
2022-06-13 00:00:00
gentoo
gentoo
PHP: Multiple Vulnerabilities
2022-09-29 00:00:00
redos
redos
ROS-20220826-01
2022-08-26 00:00:00
amazon
amazon
Important: php
2023-11-29 22:20:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00