Freeing unallocated memory in php_pgsql_free_params()
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-31625US | high8.1 | — | ||
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may le… | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugs.php.net/bug.php?id=81720ADVISORY
- https://lists.debian.org/debian-lts-announce/2022/12/msg00030.htmlADVISORY
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/WEB
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-31625WEB
- https://security.gentoo.org/glsa/202209-20ADVISORY
- https://security.netapp.com/advisory/ntap-20220722-0005/ADVISORY
- https://www.debian.org/security/2022/dsa-5179ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan