Description

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

Remediation

References

CVE-2022-31625

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6112)

WordPress Plugin AlertWire Information Disclosure (1.1.1)

WordPress Plugin Customize Youtube Videos Multiple Vulnerabilities (0.2)

Oracle Database Server CVE-2007-2110 Vulnerability (CVE-2007-2110)

WordPress 5.7.x Directory Traversal (5.7 - 5.7.11)

Severity

High

Classification

CVE-2022-31625 CWE-763 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities