Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5905-1
HistoryMar 02, 2023 - 12:00 a.m.

PHP vulnerabilities

2023-03-0200:00:00
ubuntu.com
81
ubuntu 16.04 esm
php7.0
gzip files
denial of service
cookies
data integrity
inputs
arbitrary code
long paths
sensitive information
http form uploads
resource consumption

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0.006

Percentile

79.6%

JSON

Releases

  • Ubuntu 16.04 ESM

Packages

  • php7.0 - HTML-embedded scripting language interpreter

Details

It was discovered that PHP incorrectly handled certain gzip files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2022-31628)

It was discovered that PHP incorrectly handled certain cookies.
An attacker could possibly use this issue to compromise data integrity.
(CVE-2022-31629)

It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code. (CVE-2022-31631)

It was discovered that PHP incorrectly handled resolving long paths. A
remote attacker could possibly use this issue to obtain or modify sensitive
information. (CVE-2023-0568)

It was discovered that PHP incorrectly handled a large number of field and file
parts in HTTP form uploads. A remote attacker could possibly use this issue to
cause PHP to consume resources, leading to a denial of service. (CVE-2023-0662)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchphp7.0-cgi< 7.0.33-0ubuntu0.16.04.16+esm5UNKNOWN
Ubuntu16.04noarchlibapache2-mod-php7.0< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchlibapache2-mod-php7.0-dbgsym< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchlibphp7.0-embed< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchlibphp7.0-embed-dbgsym< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchphp7.0< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchphp7.0-bcmath< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchphp7.0-bcmath-dbgsym< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchphp7.0-bz2< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Ubuntu16.04noarchphp7.0-bz2-dbgsym< 7.0.33-0ubuntu0.16.04.16UNKNOWN
Rows per page:
1-10 of 821

Related

openvas 40
osv 20
nessus 71
debian 3
slackware 3
almalinux 4
redhat 4
fedora 7
altlinux 9
suse 2
oraclelinux 4
mageia 3
rocky 2
redos 1
cloudlinux 1
ubuntu 3
gentoo 1
f5 1
redhatcve 3
debiancve 3
ubuntucve 1
alpinelinux 2
cve 2
prion 1
veracode 2
nvd 2
cvelist 1
ibm 1
cnvd 1
checkpoint_advisories 1
openvas
openvas
Ubuntu: Security Advisory (USN-5905-1)
2023-03-03 00:00:00
Debian: Security Advisory (DSA-5363-1)
2023-02-28 00:00:00
Debian: Security Advisory (DLA-3345-1)
2023-02-27 00:00:00
osv
osv
php7.0 vulnerabilities
2023-03-02 12:20:45
php7.3 - security update
2023-02-26 00:00:00
php7.4 - security update
2023-02-24 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5905-1)
2023-03-02 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : php7 (SUSE-SU-2023:0476-1)
2023-02-23 00:00:00
Debian DSA-5363-1 : php7.4 - security update
2023-02-26 00:00:00
debian
debian
[SECURITY] [DLA 3345-1] php7.3 security update
2023-02-26 22:00:18
[SECURITY] [DSA 5363-1] php7.4 security update
2023-02-24 19:21:10
[SECURITY] [DSA 5277-1] php7.4 security update
2022-11-13 18:52:43
slackware
slackware
[slackware-security] php
2022-09-30 18:00:43
[slackware-security] php
2023-02-15 03:06:12
[slackware-security] php
2023-01-07 02:09:30
almalinux
almalinux
Moderate: php security update
2023-02-28 00:00:00
Moderate: php:7.4 security update
2023-05-16 00:00:00
Moderate: php:8.0 security update
2023-02-21 00:00:00
redhat
redhat
(RHSA-2023:2903) Moderate: php:7.4 security update
2023-05-16 05:57:44
(RHSA-2023:0965) Moderate: php security update
2023-02-28 07:53:30
(RHSA-2023:2417) Moderate: php:8.1 security update
2023-05-09 05:10:10
fedora
fedora
[SECURITY] Fedora 35 Update: php-8.0.24-1.fc35
2022-10-07 13:13:29
[SECURITY] Fedora 36 Update: php-8.1.11-1.fc36
2022-10-06 15:15:28
[SECURITY] Fedora 36 Update: php-8.1.16-1.fc36
2023-02-24 03:47:37
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.2 version 8.1.11-alt1
2022-09-30 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 8.1.11-alt1
2022-10-11 00:00:00
Security fix for the ALT Linux 10 package php8.2 version 8.2.3-alt1
2023-02-21 00:00:00
suse
suse
Security update for php7 (moderate)
2022-11-01 00:00:00
Security update for php8 (important)
2022-10-19 00:00:00
oraclelinux
oraclelinux
php security update
2023-02-28 00:00:00
8.1 security update
2023-05-15 00:00:00
php:8.0 security update
2023-02-22 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2022-10-08 23:22:22
Updated php packages fix security vulnerability
2023-02-27 23:27:16
Updated php packages fix security vulnerability
2023-01-24 10:58:24
rocky
rocky
php:8.0 security update
2023-02-22 01:08:53
php security update
2023-04-06 15:53:36
redos
redos
ROS-20230418-02
2023-04-18 00:00:00
cloudlinux
cloudlinux
php: Fix of 3 CVEs
2023-03-09 21:01:01
ubuntu
ubuntu
PHP vulnerabilities
2023-02-28 00:00:00
PHP vulnerabilities
2022-11-08 00:00:00
PHP vulnerability
2023-01-23 00:00:00
gentoo
gentoo
PHP: Multiple Vulnerabilities
2022-11-19 00:00:00
f5
f5
K000136109 : PHP SQLite vulnerability CVE-2022-31631
2023-09-06 00:00:00
redhatcve
redhatcve
CVE-2022-31631
2023-01-06 16:05:18
CVE-2022-31628
2022-10-13 14:29:46
CVE-2022-31629
2022-10-13 14:29:56
debiancve
debiancve
CVE-2022-31631
2023-01-07 02:11:16
CVE-2022-31628
2022-09-28 23:15:09
CVE-2022-31629
2022-09-28 23:15:10
ubuntucve
ubuntucve
CVE-2022-31631
2023-01-05 00:00:00
alpinelinux
alpinelinux
CVE-2022-31631
2023-01-07 02:11:16
CVE-2022-31628
2022-09-28 23:15:09
cve
cve
CVE-2022-31631
2023-01-07 02:11:16
CVE-2022-31629
2022-09-28 23:15:10
prion
prion
Code injection
2022-09-28 23:15:00
veracode
veracode
Denial Of Service (DoS)
2022-09-30 11:08:30
SQL Injection
2023-01-08 13:03:34
nvd
nvd
CVE-2022-31628
2022-09-28 23:15:09
CVE-2022-31629
2022-09-28 23:15:10
cvelist
cvelist
CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
2022-09-28 22:25:10
ibm
ibm
Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)
2022-12-16 17:01:05
cnvd
cnvd
PHP Denial of Service Vulnerability
2022-09-30 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Authentication Bypass (CVE-2022-31629)
2022-11-24 00:00:00

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0.006

Percentile

79.6%

JSON
Related for USN-5905-1
openvas40osv20nessus71debian3slackware3almalinux4redhat4fedora7altlinux9suse2oraclelinux4mageia3rocky2redos1cloudlinux1ubuntu3gentoo1f51redhatcve3debiancve3ubuntucve1alpinelinux2cve2prion1veracode2nvd2cvelist1ibm1cnvd1checkpoint_advisories1