CVE-2022-31625 — Freeing unallocated memory in php_pgsql_free_params()

Affected: PHP Group PHP

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

USN-5479-1 — php7.2, php7.4, php8.0, php8.1 vulnerabilities

Affected: Ubuntu:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1

Charles Fol discovered that PHP incorrectly handled initializing certain arrays when handling the pg_query_params function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-31625)

Charles Fol discovered that PHP incorrectly handled passwords in mysqlnd. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-31626)

Most recent entries from all

CVE-2022-31625 — Freeing unallocated memory in php_pgsql_free_params()

USN-5479-1 — php7.2, php7.4, php8.0, php8.1 vulnerabilities