vulnerability

Gentoo Linux: CVE-2022-31628: PHP: Multiple Vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
1	(AV:L/AC:L/Au:M/C:N/I:N/A:P)	Sep 28, 2022	Nov 23, 2022	Mar 31, 2026

Severity

CVSS

(AV:L/AC:L/Au:M/C:N/I:N/A:P)

Published

Sep 28, 2022

Added

Nov 23, 2022

Modified

Mar 31, 2026

Description

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

Solution

gentoo-linux-upgrade-dev-lang-php

References

CVE-2022-31628
https://attackerkb.com/topics/CVE-2022-31628
CWE-674
CWE-835
EUVD-EUVD-2022-53080
GENTOO-202211-03
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53080

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today