CVE-2022-31627

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.

CVSS v3 7.7 HIGH

7.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://bugs.php.net/bug.php?id=81723	Exploit Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/202209-20	Third Party Advisory
https://security.netapp.com/advisory/ntap-20220826-0008/	Third Party Advisory
https://bugs.php.net/bug.php?id=81723	Exploit Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/202209-20	Third Party Advisory
https://security.netapp.com/advisory/ntap-20220826-0008/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:04

Type	Values Removed	Values Added
References	~~() https://bugs.php.net/bug.php?id=81723 - Exploit, Issue Tracking, Patch, Third Party Advisory~~	() https://bugs.php.net/bug.php?id=81723 - Exploit, Issue Tracking, Patch, Third Party Advisory
References	~~() https://security.gentoo.org/glsa/202209-20 - Third Party Advisory~~	() https://security.gentoo.org/glsa/202209-20 - Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20220826-0008/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20220826-0008/ - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~9.8~~	v2 : unknown v3 : 7.7

Information

Published : 2022-07-28 06:15

Updated : 2024-11-21 07:04

NVD link : CVE-2022-31627

Mitre link : CVE-2022-31627

CVE.ORG link : CVE-2022-31627

JSON object : View

Products Affected

php

php

CWE

CWE-590

Free of Memory not on the Heap

CWE-787

Out-of-bounds Write

{"id": "CVE-2022-31627", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@php.net", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-07-28T06:15:07.547", "references": [{"url": "https://bugs.php.net/bug.php?id=81723", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "security@php.net"}, {"url": "https://security.gentoo.org/glsa/202209-20", "tags": ["Third Party Advisory"], "source": "security@php.net"}, {"url": "https://security.netapp.com/advisory/ntap-20220826-0008/", "tags": ["Third Party Advisory"], "source": "security@php.net"}, {"url": "https://bugs.php.net/bug.php?id=81723", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.gentoo.org/glsa/202209-20", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20220826-0008/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@php.net", "description": [{"lang": "en", "value": "CWE-590"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption."}, {"lang": "es", "value": "En PHP versiones 8.1.x anteriores a 8.1.8, cuando las funciones fileinfo, como finfo_buffer, debido a un parche incorrecto aplicado al c\u00f3digo de terceros de libmagic, puede usarse una funci\u00f3n incorrecta para liberar la memoria asignada, lo que puede conllevar a una corrupci\u00f3n de la pila"}], "lastModified": "2024-11-21T07:04:53.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CCF7DA6-AFFF-4CF6-B30C-6A44979254A9", "versionEndExcluding": "8.1.8", "versionStartIncluding": "8.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@php.net"}