USN-5530-1

It was discovered that PHP incorrectly handled certain memory operations when obtaining file information. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

Affected packages

Ubuntu:22.04:LTS / php8.1

Package

Name: php8.1
Purl: pkg:deb/ubuntu/php8.1@8.1.2-1ubuntu2.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.1.2-1ubuntu2.2

Affected versions

8.*

8.1.0~rc4-1ubuntu2

8.1.0-1

8.1.2-1ubuntu1

8.1.2-1ubuntu2

8.1.2-1ubuntu2.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libapache2-mod-php7.4",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "libapache2-mod-php8.0",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "libapache2-mod-php8.1",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "libphp8.1-embed",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-bcmath",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-bz2",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-cgi",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-cli",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-common",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-curl",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-dba",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-dev",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-enchant",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-fpm",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-gd",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-gmp",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-imap",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-interbase",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-intl",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-ldap",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-mbstring",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-mysql",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-odbc",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-opcache",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-pgsql",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-phpdbg",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-pspell",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-readline",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-snmp",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-soap",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-sqlite3",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-sybase",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-tidy",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-xml",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-xsl",
            "binary_version": "8.1.2-1ubuntu2.2"
        },
        {
            "binary_name": "php8.1-zip",
            "binary_version": "8.1.2-1ubuntu2.2"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "id": "CVE-2022-31627",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}