2 matches found
php: password of excessive length triggers buffer overflow leading to RCE
A buffer overflow vulnerability was found in PHP when processing passwords in mysqlnd/pdo in mysqlndwireprotocol.c. When using the pdomysql extension with mysqlnd driver, if the third party is allowed to supply a MySQL database server password in the mysqlnd driver to the host for the connection,...
8.8CVSS8.1AI score0.5838EPSS
SaveExploits3References5
CVE-2022-31626
A buffer overflow vulnerability was found in PHP when processing passwords in mysqlnd/pdo in mysqlndwireprotocol.c. When using the pdomysql extension with mysqlnd driver, if the third party is allowed to supply a MySQL database server password in the mysqlnd driver to the host for the connection,...
8.8CVSS3AI score0.5838EPSS
SaveExploits3References4
20