Поиск уязвимостей
Количество 36
Количество 36
BDU:2022-03725
Уязвимость функции mysqlnd/pdo (mysqlnd_wireprotocol.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код
ALT-PU-2022-7778
ALT-PU-2022-7778: package `php8.1-soap` update to version 8.1.7-alt1
ALT-PU-2022-7755
ALT-PU-2022-7755: package `php8.0-soap` update to version 8.0.20-alt1
ALT-PU-2022-7692
ALT-PU-2022-7692: package `php8.1-soap` update to version 8.1.7-alt1
ALT-PU-2022-7686
ALT-PU-2022-7686: package `php8.0-soap` update to version 8.0.20-alt1
ALT-PU-2022-2119
ALT-PU-2022-2119: package `php7` update to version 7.4.30-alt1
ALT-PU-2022-2117
ALT-PU-2022-2117: package `php8.1` update to version 8.1.7-alt1
ALT-PU-2022-2112
ALT-PU-2022-2112: package `php8.0` update to version 8.0.20-alt1
ALT-PU-2022-2075
ALT-PU-2022-2075: package `php7` update to version 7.4.30-alt1
ALT-PU-2022-2065
ALT-PU-2022-2065: package `php8.1` update to version 8.1.7-alt1
ALT-PU-2022-2064
ALT-PU-2022-2064: package `php8.0` update to version 8.0.20-alt1
ROS-20220826-01
Множественные уязвимости PHP
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
CVE-2022-31626
mysqlnd/pdo password buffer overflow
CVE-2022-31626
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ...
RLSA-2022:5904
Important: php security update
RLSA-2022:5468
Important: php:8.0 security update
RLSA-2022:5467
Important: php:7.4 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-03725 Уязвимость функции mysqlnd/pdo (mysqlnd_wireprotocol.c) интерпретатора языка программирования PHP, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.5 | 58% Средний | больше 4 лет назад |
| ALT-PU-2022-7778 ALT-PU-2022-7778: package `php8.1-soap` update to version 8.1.7-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-7755 ALT-PU-2022-7755: package `php8.0-soap` update to version 8.0.20-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-7692 ALT-PU-2022-7692: package `php8.1-soap` update to version 8.1.7-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-7686 ALT-PU-2022-7686: package `php8.0-soap` update to version 8.0.20-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2119 ALT-PU-2022-2119: package `php7` update to version 7.4.30-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2117 ALT-PU-2022-2117: package `php8.1` update to version 8.1.7-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2112 ALT-PU-2022-2112: package `php8.0` update to version 8.0.20-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2075 ALT-PU-2022-2075: package `php7` update to version 7.4.30-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2065 ALT-PU-2022-2065: package `php8.1` update to version 8.1.7-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2064 ALT-PU-2022-2064: package `php8.0` update to version 8.0.20-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | ROS-20220826-01 Множественные уязвимости PHP | около 4 лет назад | ||
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability. | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | CVE-2022-31626 mysqlnd/pdo password buffer overflow | CVSS3: 7.5 | 58% Средний | около 1 года назад |
| CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x belo ... | CVSS3: 8.8 | 58% Средний | больше 4 лет назад |
 | RLSA-2022:5904 Important: php security update | 58% Средний | больше 4 лет назад | |
| RLSA-2022:5468 Important: php:8.0 security update | 58% Средний | больше 4 лет назад | |
| RLSA-2022:5467 Important: php:7.4 security update | 58% Средний | больше 4 лет назад |
Уязвимостей на страницу