Описание
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| php8.2 | fixed | 8.2.4-1 | package | |
| php7.4 | removed | package | ||
| php7.3 | removed | package |
Примечания
PHP Bug: https://bugs.php.net/bug.php?id=81744
Fixed in 8.2.3
https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4
https://github.com/php/php-src/commit/c840f71524067aa474c00c3eacfb83bd860bfc8a
https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5
Связанные уязвимости
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
BCrypt hashes erroneously validate if the salt is cut short by `$`