Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5717-1
HistoryNov 08, 2022 - 12:00 a.m.

PHP vulnerabilities

2022-11-0800:00:00
ubuntu.com
106

9.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON

Releases

  • Ubuntu 22.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • php7.2 - HTML-embedded scripting language interpreter
  • php7.4 - HTML-embedded scripting language interpreter
  • php8.1 - HTML-embedded scripting language interpreter

Details

It was discovered that PHP incorrectly handled certain gzip files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2022-31628)

It was discovered that PHP incorrectly handled certain cookies.
An attacker could possibly use this issue to compromise the data
(CVE-2022-31629)

It was discovered that PHP incorrectly handled certain image fonts.
An attacker could possibly use this issue to expose sensitive information.
This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.10, and Ubuntu 22.04 LTS.
(CVE-2022-31630)

Nicky Mouha discovered that PHP incorrectly handled certain SHA-3 operations.
An attacker could possibly use this issue to cause a crash
or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS,
Ubuntu 22.10, and Ubuntu 22.04 LTS. (CVE-2022-37454)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.10noarchphp8.1-cli< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibapache2-mod-php7.4< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibapache2-mod-php8.0< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibapache2-mod-php8.1< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibapache2-mod-php8.1-dbgsym< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibphp8.1-embed< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchlibphp8.1-embed-dbgsym< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchphp8.1< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchphp8.1-bcmath< 8.1.7-1ubuntu3.1UNKNOWN
Ubuntu22.10noarchphp8.1-bcmath-dbgsym< 8.1.7-1ubuntu3.1UNKNOWN
Rows per page:
1-10 of 2821

Related

nessus 65
gentoo 1
fedora 10
debian 6
openvas 35
osv 18
oraclelinux 4
rocky 2
redhat 4
almalinux 4
slackware 3
altlinux 6
suse 2
mageia 1
veracode 3
redhatcve 4
debiancve 3
redos 1
prion 3
alpinelinux 4
ubuntucve 4
cve 3
ibm 1
ubuntu 1
cvelist 3
cbl_mariner 4
cnvd 1
checkpoint_advisories 1
githubexploit 1
amazon 1
nessus
nessus
Debian DSA-5277-1 : php7.4 - security update
2022-11-14 00:00:00
GLSA-202211-03 : PHP: Multiple Vulnerabilities
2022-11-22 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : PHP vulnerabilities (USN-5717-1)
2022-11-09 00:00:00
gentoo
gentoo
PHP: Multiple Vulnerabilities
2022-11-19 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: php-8.1.12-1.fc37
2022-11-10 22:53:48
[SECURITY] Fedora 36 Update: php-8.1.11-1.fc36
2022-10-06 15:15:28
[SECURITY] Fedora 35 Update: php-8.0.24-1.fc35
2022-10-07 13:13:29
debian
debian
[SECURITY] [DSA 5277-1] php7.4 security update
2022-11-13 18:53:11
[SECURITY] [DLA 3243-1] php7.3 security update
2022-12-15 18:33:40
[SECURITY] [DLA 3175-1] python3.7 security update
2022-11-01 13:37:12
openvas
openvas
Fedora: Security Advisory for php (FEDORA-2022-f204e1d0ed)
2022-11-11 00:00:00
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2023-1332)
2023-02-09 00:00:00
Debian: Security Advisory (DSA-5277-1)
2022-11-15 00:00:00
osv
osv
php7.4 - security update
2022-11-13 00:00:00
php7.2, php7.4, php8.1 vulnerabilities
2022-11-08 14:42:27
Moderate: php security update
2023-04-06 15:53:36
oraclelinux
oraclelinux
8.1 security update
2023-05-15 00:00:00
php security update
2023-02-28 00:00:00
php:7.4 security update
2023-05-24 00:00:00
rocky
rocky
php:8.0 security update
2023-02-22 01:08:53
php security update
2023-04-06 15:53:36
redhat
redhat
(RHSA-2023:0965) Moderate: php security update
2023-02-28 07:53:30
(RHSA-2023:2903) Moderate: php:7.4 security update
2023-05-16 05:57:44
(RHSA-2023:2417) Moderate: php:8.1 security update
2023-05-09 05:10:10
almalinux
almalinux
Moderate: php:7.4 security update
2023-05-16 00:00:00
Moderate: php security update
2023-02-28 00:00:00
Moderate: php:8.0 security update
2023-02-21 00:00:00
slackware
slackware
[slackware-security] php
2022-09-30 18:00:43
[slackware-security] php
2022-11-10 19:52:56
[slackware-security] php80/php81
2022-10-31 23:47:05
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.1 version 8.1.11-alt1
2022-10-11 00:00:00
Security fix for the ALT Linux 10 package php8.2 version 8.1.11-alt1
2022-09-30 00:00:00
Security fix for the ALT Linux 10 package php8.2 version 8.1.12-alt1
2022-10-31 00:00:00
suse
suse
Security update for php7 (moderate)
2022-11-01 00:00:00
Security update for php8 (important)
2022-10-19 00:00:00
mageia
mageia
Updated php packages fix security vulnerability
2022-10-08 23:22:22
veracode
veracode
Denial Of Service (DoS)
2022-09-30 11:08:30
Arbitrary Code Execution
2022-10-27 03:36:20
Insecure Cookie
2022-09-30 11:10:30
redhatcve
redhatcve
CVE-2022-31628
2022-10-13 14:29:46
CVE-2022-31630
2022-11-02 04:55:54
CVE-2022-31629
2022-10-13 14:29:56
debiancve
debiancve
CVE-2022-31628
2022-09-28 23:15:00
CVE-2022-31630
2022-11-14 07:15:00
CVE-2022-31629
2022-09-28 23:15:00
redos
redos
ROS-20221222-04
2022-12-22 00:00:00
prion
prion
Design/Logic Flaw
2022-11-14 07:15:00
Code injection
2022-09-28 23:15:00
Code injection
2022-09-28 23:15:00
alpinelinux
alpinelinux
CVE-2022-31630
2022-11-14 07:15:00
CVE-2022-31628
2022-09-28 23:15:00
CVE-2022-31629
2022-09-28 23:15:00
ubuntucve
ubuntucve
CVE-2022-31630
2022-10-31 00:00:00
CVE-2022-31628
2022-09-28 00:00:00
CVE-2022-31629
2022-09-28 00:00:00
cve
cve
CVE-2022-31630
2022-11-14 07:15:00
CVE-2022-31628
2022-09-28 23:15:00
CVE-2022-31629
2022-09-28 23:15:00
ibm
ibm
Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)
2022-12-16 17:01:05
ubuntu
ubuntu
PHP vulnerabilities
2023-03-02 00:00:00
cvelist
cvelist
CVE-2022-31630 OOB read due to insufficient input validation in imageloadfont()
2022-11-14 06:53:06
CVE-2022-31628 phar wrapper can occur dos when using quine gzip file
2022-09-27 00:00:00
CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities
2022-09-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-31628 affecting package php 7.4.14-3
2024-05-18 03:07:22
CVE-2022-31629 affecting package php 7.4.14-3
2024-05-18 03:07:22
CVE-2022-37454 affecting package python3 for versions less than 3.9.14-5
2022-12-19 20:12:40
cnvd
cnvd
PHP Denial of Service Vulnerability
2022-09-30 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Authentication Bypass (CVE-2022-31629)
2022-11-24 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Php
2022-10-07 08:15:23
amazon
amazon
Important: python36
2022-12-01 17:34:00

9.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.4%

JSON
Related for USN-5717-1
nessus65gentoo1fedora10debian6openvas35osv18oraclelinux4rocky2redhat4almalinux4slackware3altlinux6suse2mageia1veracode3redhatcve4debiancve3redos1prion3alpinelinux4ubuntucve4cve3ibm1ubuntu1cvelist3cbl_mariner4cnvd1checkpoint_advisories1githubexploit1amazon1