CVE-2022-31626

Published: Jun 16, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

Affected (5)

Products: Php: Php · Debian: Debian Linux

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 7.4.0 to 7.4.30
Php Php	From 8.0.0 to 8.0.20
Php Php	From 8.1.0 to 8.1.7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (14)

https://bugs.php.net/bug.php?id=81719

Source: security@php.net

ExploitIssue TrackingMailing ListPatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html

Source: security@php.net

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/

Source: security@php.net

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/

Source: security@php.net

https://security.gentoo.org/glsa/202209-20

Source: security@php.net

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220722-0005/

Source: security@php.net

Third Party Advisory

https://www.debian.org/security/2022/dsa-5179

Source: security@php.net

Third Party Advisory

https://bugs.php.net/bug.php?id=81719

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingMailing ListPatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2022/12/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3T4MMEEZYYAEHPQMZDFN44PHORJWJFZQ/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTZQKRGEYJT5UB4FGG3MOE72SQUHSL4/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202209-20

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220722-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2022/dsa-5179

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.