Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-31627

Опубликовано: 28 июл. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.7

Описание

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

trusty

ignored

end of standard support
trusty/esm

not-affected

code not present

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

code not present
focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code not present
esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

DNE

kinetic

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

code not present
focal

not-affected

code not present
impish

DNE

jammy

DNE

kinetic

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

not-affected

code not present
jammy

DNE

kinetic

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

released

8.1.5-1ubuntu3
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

impish

DNE

jammy

released

8.1.2-1ubuntu2.2
kinetic

released

8.1.5-1ubuntu3
trusty

DNE

trusty/esm

DNE

Показывать по

EPSS

Процентиль: 34%
0.0013
Низкий

7.7 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
почти 3 года назад

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

CVSS3: 7.7
nvd
почти 3 года назад

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

CVSS3: 9.8
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 7.7
debian
почти 3 года назад

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as fi ...

CVSS3: 9.8
github
почти 3 года назад

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

EPSS

Процентиль: 34%
0.0013
Низкий

7.7 High

CVSS3