In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gmpUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-ldapUpgrade php-soapUpgrade php-dbgUpgrade apcu-panelUpgrade php-ffiUpgrade php-intlUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-commonUpgrade phpUpgrade php-pgsqlUpgrade php-odbcUpgrade php-jsonUpgrade php-dbaUpgrade php-pecl-xdebug3Upgrade php-pdoUpgrade libzipUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-develUpgrade php-snmpUpgrade php-opcacheUpgrade libzip-develUpgrade php-processUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pearUpgrade php-embeddedUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-bcmathUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-fpm | Feb 22, 2023 | Feb 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-xmlUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-recodeUpgrade php-fpmUpgrade php-commonUpgrade php-embeddedUpgrade php-xmlrpcUpgrade phpUpgrade php-opcacheUpgrade php-develUpgrade php-cliUpgrade php-snmpUpgrade php-dbgUpgrade php-ldapUpgrade php-gmpUpgrade php-pdoUpgrade php-dbaUpgrade php-odbcUpgrade php-processUpgrade php-soapUpgrade php-enchantUpgrade php-gdUpgrade php-pspellUpgrade php-pgsqlUpgrade php-intlUpgrade php-bcmathUpgrade php-sodium | Sep 14, 2023 | Sep 14, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1Upgrade php8.1-enchantUpgrade php8.1-mbstringUpgrade php8.1-dbaUpgrade php8.1-process-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-develUpgrade php8.1-gmpUpgrade php8.1-intlUpgrade php8.1-opcacheUpgrade php8.1-tidyUpgrade php8.1-embedded-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-processUpgrade php8.1-commonUpgrade php8.1-enchant-debuginfoUpgrade php8.1-pdoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-ldapUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-cliUpgrade php8.1-ffiUpgrade php8.1-odbc-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-debuginfoUpgrade php8.1-dbgUpgrade php8.1-xmlUpgrade php8.1-pgsqlUpgrade php8.1-odbcUpgrade php8.1-gdUpgrade php8.1-xml-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-fpm-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-fpmUpgrade php8.1-soapUpgrade php8.1-intl-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-mysqlnd-debuginfo | Feb 17, 2025 | Jan 5, 2023 |
| Centos_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbc-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-cliUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug3-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebug3Upgrade php-jsonUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-gdUpgrade php-pearUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-debuginfoUpgrade apcu-panelUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-dbaUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade libzip-toolsUpgrade libzipUpgrade php-pecl-xdebug-debugsourceUpgrade phpUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-mysqlndUpgrade libzip-debugsourceUpgrade php-enchant-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbgUpgrade php-pgsqlUpgrade php-ffi-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmpUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-embeddedUpgrade php-bcmathUpgrade libzip-develUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-json-debuginfoUpgrade php-ffi | Feb 22, 2023 | Feb 21, 2023 |
| Debian | — | Upgrade php7.4Upgrade php8.2 | Feb 27, 2023 | Feb 27, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Aug 12, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-commonUpgrade php-soapUpgrade php-gdUpgrade php-recodeUpgrade php-fpmUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-processUpgrade php-pdoUpgrade php-cli | Apr 13, 2023 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-intlUpgrade apcu-panelUpgrade php-gmpUpgrade phpUpgrade php-commonUpgrade php-jsonUpgrade libzip-toolsUpgrade php-odbcUpgrade php-ffiUpgrade php-dbaUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-soapUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-mysqlndUpgrade php-embeddedUpgrade libzipUpgrade php-processUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-develUpgrade php-mbstringUpgrade php-cliUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pearUpgrade php-xmlUpgrade php-fpmUpgrade libzip-develUpgrade php-enchantUpgrade php-bcmathUpgrade php-snmp | Feb 23, 2023 | Jan 5, 2023 |
| Php | — | Upgrade to PHP version 8.0.27Upgrade to PHP version 8.2.2Upgrade to PHP version 8.1.15 | Feb 17, 2026 | Feb 17, 2026 |
| Redhat_linux | — | Upgrade php-dbaUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-gmpUpgrade php-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlrpcUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-fpmUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-commonNo solution existsUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade php-jsonUpgrade php-soapUpgrade php-pecl-xdebug3Upgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-cli-debuginfoUpgrade php-pearUpgrade php-pecl-xdebug3-debugsourceUpgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-ldapUpgrade php-ffiUpgrade php-pecl-xdebug3-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-snmpUpgrade libzipUpgrade php-xmlUpgrade php-fpm-debuginfoUpgrade php-ffi-debuginfoUpgrade php-enchant-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade phpUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath | Feb 22, 2023 | Feb 21, 2023 |
| Rocky_linux | — | Upgrade php-gmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade php-pdoUpgrade php-soapUpgrade php-ldapUpgrade libzip-debugsourceUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-commonUpgrade php-ffiUpgrade php-fpm-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-ffi-debuginfoUpgrade php-dbaUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug3Upgrade php-mbstringUpgrade php-debuginfoUpgrade php-cliUpgrade php-pecl-xdebugUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade libzip-develUpgrade php-processUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade libzipUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-develUpgrade phpUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debuginfoUpgrade php-soap-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-pecl-xdebug-debuginfo | Mar 12, 2024 | Apr 6, 2023 |
| Suse | — | Upgrade php8-pgsqlUpgrade php8-soapUpgrade php7-sysvshmUpgrade php8-xslUpgrade php8-cliUpgrade php74-ftpUpgrade php74-jsonUpgrade php74-calendarUpgrade php7-readlineUpgrade php7-soapUpgrade php7-gmpUpgrade php7-zipUpgrade php74-domUpgrade php8-domUpgrade php7-firebirdUpgrade php8-xmlwriterUpgrade php74-ctypeUpgrade php7-gettextUpgrade php74-sodiumUpgrade php8-odbcUpgrade php7-intlUpgrade php7-xslUpgrade php7-exifUpgrade php8-tokenizerUpgrade php8-develUpgrade php74-xmlrpcUpgrade php8-pcntlUpgrade php74-mbstringUpgrade php8-snmpUpgrade php8-dbaUpgrade php7-pcntlUpgrade php74-intlUpgrade php8-curlUpgrade php74-sysvmsgUpgrade php8-gettextUpgrade php74-bcmathUpgrade php8-bz2Upgrade php7-dbaUpgrade php8-sysvmsgUpgrade php8-tidyUpgrade php8-socketsUpgrade php8-fpmUpgrade php8-testUpgrade php8-ftpUpgrade php8-ctypeUpgrade php7-tidyUpgrade php7-pear-archive_tarUpgrade php7-embedUpgrade php74-xmlreaderUpgrade php7-gdUpgrade php7-xmlreaderUpgrade php7-pearUpgrade php74-exifUpgrade php8-zlibUpgrade php74-enchantUpgrade php7-domUpgrade php74-zipUpgrade php7-posixUpgrade php74-zlibUpgrade php8-mbstringUpgrade php7-ldapUpgrade php8Upgrade php7-testUpgrade php7-xmlrpcUpgrade php74-pgsqlUpgrade php74-fileinfoUpgrade php8-posixUpgrade php7-calendarUpgrade php8-gdUpgrade php7-sodiumUpgrade php74Upgrade php7-opcacheUpgrade php8-xmlreaderUpgrade php7-bz2Upgrade php74-opensslUpgrade php7Upgrade php7-opensslUpgrade php7-cliUpgrade php74-posixUpgrade php8-zipUpgrade php7-sqliteUpgrade php74-gmpUpgrade php74-soapUpgrade php8-iconvUpgrade php8-opcacheUpgrade php8-mysqlUpgrade php8-sysvsemUpgrade php7-xmlwriterUpgrade php74-xslUpgrade php74-mysqlUpgrade php74-iconvUpgrade php74-bz2Upgrade php7-fileinfoUpgrade php8-fastcgiUpgrade apache2-mod_php8Upgrade php7-pharUpgrade php8-intlUpgrade php74-readlineUpgrade php7-jsonUpgrade php74-tidyUpgrade php7-bcmathUpgrade php8-sysvshmUpgrade php8-sqliteUpgrade php74-sysvsemUpgrade php7-tokenizerUpgrade php8-gmpUpgrade php7-develUpgrade php7-wddxUpgrade php74-snmpUpgrade php7-snmpUpgrade php8-pdoUpgrade php7-socketsUpgrade php7-mbstringUpgrade php7-sysvmsgUpgrade php7-shmopUpgrade php7-ftpUpgrade php74-dbaUpgrade php74-curlUpgrade php7-sysvsemUpgrade php8-pharUpgrade php8-ldapUpgrade php74-sysvshmUpgrade php8-embedUpgrade php74-pdoUpgrade php74-opcacheUpgrade apache2-mod_php7Upgrade php74-gdUpgrade php8-shmopUpgrade php74-pcntlUpgrade php7-pdoUpgrade php7-iconvUpgrade php8-readlineUpgrade php8-opensslUpgrade php7-fpmUpgrade php74-sqliteUpgrade php74-tokenizerUpgrade php74-ldapUpgrade php74-develUpgrade php7-ctypeUpgrade php74-fastcgiUpgrade php74-shmopUpgrade php7-mysqlUpgrade php8-sodiumUpgrade php8-fileinfoUpgrade php8-exifUpgrade php74-socketsUpgrade php8-calendarUpgrade php7-curlUpgrade php7-pgsqlUpgrade php7-zlibUpgrade php74-pharUpgrade php7-fastcgiUpgrade php8-enchantUpgrade php8-bcmathUpgrade php7-odbcUpgrade php74-fpmUpgrade php7-enchantUpgrade php74-xmlwriterUpgrade php74-gettextUpgrade php74-odbcUpgrade apache2-mod_php74 | Jan 12, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade php8.1-cgiUpgrade php7.2-cliUpgrade php7.4Upgrade libapache2-mod-php7.4Upgrade php7.0-zip (Ubuntu Pro)Upgrade php7.2Upgrade php8.1-sqlite3Upgrade php7.4-cliUpgrade libapache2-mod-php8.0Upgrade php7.4-sqlite3Upgrade php8.1-cliUpgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade libapache2-mod-php8.1Upgrade php7.0-cli (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade php7.2-sqlite3Upgrade php7.0-fpm (Ubuntu Pro)Upgrade php8.1Upgrade libapache2-mod-php7.2Upgrade php7.0 (Ubuntu Pro)Upgrade php7.4-cgiUpgrade php7.2-cgi | Jan 24, 2023 | Jan 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub