Arbitrary Code Execution

🗓️ 27 Oct 2022 03:36:20Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 40 Views

php8 vulnerability in imageloadfont() function for Arbitrary Code Executio

Reporter	Title	Published	Views	Family All 167
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.25-alt1	2 Nov 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.2 version 8.1.12-alt1	31 Oct 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.1 version 8.1.12-alt1	3 Nov 202200:00	–	altlinux
GithubExploit	Exploit for Out-of-bounds Read in Php	14 Mar 202614:33	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Php	14 Mar 202614:43	–	githubexploit
Tenable Nessus	Amazon Linux 2022 : php8.1 (ALAS2022-2022-243)	10 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2023-081)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.0-2023-004)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : php (ALASPHP8.1-2023-001)	13 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0088: php:7.4 (ALINUX3-SA-2023:0088)	14 May 202500:00	–	nessus

Vulners

Node

php8 php8Match8.0.21-r0os

AND

php8 php8Match8.0.6-r0os

AND

php8 php8Match8.0.10-r0os

AND

php8 php8Match8.0.23-r0os

AND

php8 php8Match8.0.9-r1os

AND

php8 php8Match8.0.15-r1os

AND

php8 php8Match8.0.22-r0os

AND

php8 php8Match8.0.24-r1os

AND

php8 php8Match8.0.5-r0os

AND

php8 php8Match8.0.9-r0os

AND

php8 php8Match8.0.8-r0os

AND

php8 php8Match8.0.11-r0os

AND

php8 php8Match8.0.10-r1os

AND

php8 php8Match8.0.21-r2os

AND

php8 php8Match8.0.14-r0os

AND

php8 php8Match8.0.17-r0os

AND

php8 php8Match8.0.7-r1os

AND

php8 php8Match8.0.15-r3os

AND

php8 php8Match8.0.15-r2os

AND

php8 php8Match8.0.3-r0os

AND

php8 php8Match8.0.24-r2os

AND

php8 php8Match8.0.19-r1os

AND

php8 php8Match8.0.21-r3os

AND

php8 php8Match8.0.21-r1os

AND

php8 php8Match8.0.19-r2os

AND

php8 php8Match8.0.20-r0os

AND

php8 php8Match8.0.7-r0os

AND

php8 php8Match8.0.16-r0os

AND

php8 php8Match8.0.12-r1os

AND

php8 php8Match8.0.11-r1os

AND

php8 php8Match8.0.13-r1os

AND

php8 php8Match8.0.10-r2os

AND

php8 php8Match8.0.12-r0os

AND

php8 php8Match8.0.19-r0os

AND

php8 php8Match8.0.18-r1os

AND

php8 php8Match8.0.24-r0os

AND

alpinelinux alpine_linuxMatchedge

php81 php81Match8.1.4-r0os

AND

php81 php81Match8.1.11-r0os

AND

php81 php81Match8.1.8-r1os

AND

php81 php81Match8.1.0_rc3-r0os

AND

php81 php81Match8.1.2-r0os

AND

php81 php81Match8.1.5-r2os

AND

php81 php81Match8.1.11-r1os

AND

php81 php81Match8.1.0_rc2-r0os

AND

php81 php81Match8.1.0-r0os

AND

php81 php81Match8.1.8-r3os

AND

php81 php81Match8.1.0_rc4-r1os

AND

php81 php81Match8.1.0_rc2-r1os

AND

php81 php81Match8.1.11-r2os

AND

php81 php81Match8.1.2-r2os

AND

php81 php81Match8.1.8-r0os

AND

php81 php81Match8.1.1-r0os

AND

php81 php81Match8.1.6-r1os

AND

php81 php81Match8.1.0_rc5-r1os

AND

php81 php81Match8.1.3-r0os

AND

php81 php81Match8.1.3-r1os

AND

php81 php81Match8.1.8-r2os

AND

php81 php81Match8.1.10-r0os

AND

php81 php81Match8.1.7-r0os

AND

php81 php81Match8.1.6-r0os

AND

php81 php81Match8.1.5-r1os

AND

php81 php81Match8.1.11-r3os

AND

php81 php81Match8.1.0_rc1-r0os

AND

php81 php81Match8.1.2-r3os

AND

php81 php81Match8.1.6-r2os

AND

php81 php81Match8.1.9-r0os

AND

php81 php81Match8.1.0_rc2-r2os

AND

alpinelinux alpine_linuxMatchedge

php8 php8Match8.0.20-r0os

AND

php8 php8Match8.0.22-r0os

AND

php8 php8Match8.0.18-r1os

AND

php8 php8Match8.0.19-r0os

AND

php8 php8Match8.0.19-r1os

AND

php8 php8Match8.0.21-r0os

AND

php8 php8Match8.0.24-r0os

AND

alpinelinux alpine_linuxMatch3.16

php81 php81Match8.1.6-r1os

AND

php81 php81Match8.1.11-r0os

AND

php81 php81Match8.1.6-r0os

AND

php81 php81Match8.1.9-r0os

AND

php81 php81Match8.1.7-r0os

AND

php81 php81Match8.1.8-r0os

AND

alpinelinux alpine_linuxMatch3.16

php8 php8Match8.0.13-r0os

AND

php8 php8Match8.0.16-r0os

AND

php8 php8Match8.0.14-r0os

AND

php8 php8Match8.0.17-r0os

AND

php8 php8Match8.0.12-r1os

AND

php8 php8Match8.0.12-r0os

AND

php8 php8Match8.0.18-r0os

AND

alpinelinux alpine_linuxMatch3.15

php7 php7Match7.4.21-r0os

AND

php7 php7Match7.4.26-r0os

AND

php7 php7Match7.4.25-r0os

AND

php7 php7Match7.4.24-r0os

AND

php7 php7Match7.4.32-r0os

AND

php7 php7Match7.4.20-r0os

AND

php7 php7Match7.4.23-r0os

AND

php7 php7Match7.4.22-r0os

AND

php7 php7Match7.4.19-r0os

AND

alpinelinux alpine_linuxMatch3.14

php7 php7Match7.4.28-r0os

AND

php7 php7Match7.4.26-r0os

AND

php7 php7Match7.4.30-r0os

AND

php7 php7Match7.4.27-r0os

AND

php7 php7Match7.4.32-r0os

AND

php7 php7Match7.4.25-r1os

AND

php7 php7Match7.4.25-r0os

AND

php7 php7Match7.4.29-r0os

AND

alpinelinux alpine_linuxMatch3.15

focal focalMatch7.4.3-4ubuntu1debian

AND

focal focalMatch7.4.3-4ubuntu2.4debian

AND

focal focalMatch7.4.3-4ubuntu2.3debian

AND

focal focalMatch7.4.3-4ubuntu2.2debian

AND

debian debian_linux

php7.4 php7.4Match7.4.11-1debian

AND

debian debian_linuxMatch11

php82 php82Match8.2.0_alpha3-r1os

AND

php82 php82Match8.2.0_rc3-r0os

AND

php82 php82Match8.2.0_rc1-r1os

AND

php82 php82Match8.2.0_beta2-r1os

AND

php82 php82Match8.2.0_rc2-r0os

AND

php82 php82Match8.2.0_beta1-r2os

AND

php82 php82Match8.2.0_alpha3-r0os

AND

php82 php82Match8.2.0_rc4-r3os

AND

php82 php82Match8.2.0_beta2-r0os

AND

php82 php82Match8.2.0_rc4-r2os

AND

php82 php82Match8.2.0_alpha2-r0os

AND

php82 php82Match8.2.0_beta1-r0os

AND

php82 php82Match8.2.0_rc4-r1os

AND

php82 php82Match8.2.0_rc4-r0os

AND

php82 php82Match8.2.0_beta3-r1os

AND

php82 php82Match8.2.0_alpha1-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
github	www.github.com/php/php-src/commit/d50532be91f054ef9beb1afca2ea94f4a70f7c4d
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.16/community.yaml
bugs	www.bugs.php.net/bug.php
access	www.access.redhat.com/security/cve/cve-2022-31630

02 Apr 2024 06:46Current

8.8High risk

Vulners AI Score8.8

CVSS 3.16.5 - 7.1

EPSS0.00046