Skip to content
OpenAdvisories
Critical USN-5818-1 1 CVE

php7.2, php7.4, php8.1 vulnerability

Published Jan 23, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS php7.2 7.2.24-0ubuntu0.18.04.16
Ubuntu · 20.04 LTS 20.04:LTS php7.4 7.4.3-4ubuntu2.17
Ubuntu · 22.04 LTS 22.04:LTS php8.1 8.1.2-1ubuntu2.10

Vulnerabilities 1

  • Critical 9.1
    CVE-2022-31631

    PDO::quote() may return unquoted string

    In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-31631