In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-toolsUpgrade php-commonUpgrade php-intlUpgrade php-ldapUpgrade phpUpgrade php-pecl-zipUpgrade php-ffiUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-jsonUpgrade php-odbcUpgrade php-gmpUpgrade apcu-panelUpgrade php-gdUpgrade php-soapUpgrade php-dbgUpgrade php-embeddedUpgrade php-pearUpgrade php-enchantUpgrade php-develUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-fpmUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-opcacheUpgrade php-processUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-pdoUpgrade php-bcmathUpgrade libzip-develUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade libzipUpgrade php-cli | Feb 22, 2023 | Feb 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade php-develUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-recodeUpgrade php-opcacheUpgrade php-commonUpgrade php-snmpUpgrade php-xmlrpcUpgrade phpUpgrade php-embeddedUpgrade php-cliUpgrade php-xmlUpgrade php-fpmUpgrade php-odbcUpgrade php-bcmathUpgrade php-ldapUpgrade php-processUpgrade php-soapUpgrade php-enchantUpgrade php-pgsqlUpgrade php-gdUpgrade php-sodiumUpgrade php-gmpUpgrade php-pspellUpgrade php-dbaUpgrade php-pdoUpgrade php-intlUpgrade php-dbg | Sep 14, 2023 | Sep 14, 2023 |
| Amazon_linux_2023 | — | Upgrade php8.1-cli-debuginfoUpgrade php8.1-processUpgrade php8.1-soap-debuginfoUpgrade php8.1-gmpUpgrade php8.1-opcacheUpgrade php8.1-mbstringUpgrade php8.1Upgrade php8.1-pdoUpgrade php8.1-tidyUpgrade php8.1-enchantUpgrade php8.1-commonUpgrade php8.1-pdo-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-embedded-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-process-debuginfoUpgrade php8.1-dbaUpgrade php8.1-develUpgrade php8.1-intlUpgrade php8.1-ldapUpgrade php8.1-tidy-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gdUpgrade php8.1-xml-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-bcmathUpgrade php8.1-odbc-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-ldap-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-ffiUpgrade php8.1-cliUpgrade php8.1-intl-debuginfoUpgrade php8.1-soapUpgrade php8.1-fpmUpgrade php8.1-xmlUpgrade php8.1-dbgUpgrade php8.1-mysqlndUpgrade php8.1-debuginfoUpgrade php8.1-pgsql | Feb 17, 2025 | Jan 5, 2023 |
| Centos_linux | — | Upgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-pecl-xdebug3-debugsourceUpgrade php-fpmUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pdoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug3Upgrade php-cliUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-pgsqlUpgrade php-ffi-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-cli-debuginfoUpgrade php-ldapUpgrade php-ffiUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debugsourceUpgrade libzipUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-commonUpgrade php-dbaUpgrade php-enchantUpgrade php-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embeddedUpgrade php-debugsource | Feb 22, 2023 | Feb 21, 2023 |
| Debian | — | Upgrade php8.2Upgrade php7.4 | Feb 27, 2023 | Feb 27, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Aug 13, 2024 | Aug 12, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-commonUpgrade phpUpgrade php-odbcUpgrade php-soapUpgrade php-gdUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pdoUpgrade php-xmlUpgrade php-cliUpgrade php-process | Apr 13, 2023 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade php-cliUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade libzip-develUpgrade php-fpmUpgrade php-xmlUpgrade php-processUpgrade libzipUpgrade php-opcacheUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-snmpUpgrade php-enchantUpgrade php-mbstringUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-bcmathUpgrade php-gdUpgrade php-gmpUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-soapUpgrade php-ldapUpgrade php-odbcUpgrade apcu-panelUpgrade php-jsonUpgrade phpUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-commonUpgrade php-pgsqlUpgrade php-ffiUpgrade php-dba | Feb 23, 2023 | Jan 5, 2023 |
| Php | — | Upgrade to PHP version 8.0.27Upgrade to PHP version 8.1.15Upgrade to PHP version 8.2.2 | Feb 17, 2026 | Feb 17, 2026 |
| Redhat_linux | — | Upgrade php-odbc-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug3Upgrade php-pecl-zip-debugsourceUpgrade php-dba-debuginfoUpgrade php-ldap-debuginfoUpgrade php-fpmUpgrade php-pearUpgrade php-develUpgrade php-dbgUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade php-json-debuginfoUpgrade php-common-debuginfoUpgrade php-gmpUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-pecl-apcu-develNo solution existsUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-xdebugUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-process-debuginfoUpgrade php-xmlUpgrade php-gdUpgrade php-bcmathUpgrade php-embedded-debuginfoUpgrade phpUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-pecl-rrdUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-cliUpgrade php-ldapUpgrade php-pecl-xdebug3-debuginfoUpgrade php-embeddedUpgrade libzip-develUpgrade php-ffiUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-fpm-debuginfoUpgrade php-processUpgrade php-ffi-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfo | Feb 22, 2023 | Feb 21, 2023 |
| Rocky_linux | — | Upgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-cliUpgrade php-debuginfoUpgrade libzipUpgrade php-fpmUpgrade php-processUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade libzip-develUpgrade php-bcmathUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-snmpUpgrade phpUpgrade php-develUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-mbstringUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebugUpgrade php-gdUpgrade php-gd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-ffi-debuginfoUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade php-ffiUpgrade php-dbaUpgrade php-json-debuginfoUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pgsqlUpgrade php-mysqlnd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade php-ldapUpgrade libzip-toolsUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3-debugsourceUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-common-debuginfo | Mar 12, 2024 | Apr 6, 2023 |
| Suse | — | Upgrade php74-opcacheUpgrade php74-tidyUpgrade php74-readlineUpgrade php74-iconvUpgrade apache2-mod_php7Upgrade php7-snmpUpgrade php7-bcmathUpgrade php7-pgsqlUpgrade php7-tokenizerUpgrade php7-pdoUpgrade php7-ftpUpgrade php7-iconvUpgrade php74-mysqlUpgrade php74-pcntlUpgrade php7-mysqlUpgrade php74-xslUpgrade php8-opensslUpgrade php7-ctypeUpgrade php74-gdUpgrade php74-odbcUpgrade php8-readlineUpgrade php74-fpmUpgrade php8-enchantUpgrade php7-zlibUpgrade php8-gmpUpgrade php8-intlUpgrade php8-bcmathUpgrade php8-fastcgiUpgrade php74-sysvshmUpgrade php8-fileinfoUpgrade php74-sqliteUpgrade php8-ldapUpgrade php74-curlUpgrade php74-dbaUpgrade php74-snmpUpgrade php8-pharUpgrade php74-pdoUpgrade php7-fileinfoUpgrade php7-socketsUpgrade php8-pdoUpgrade php7-sysvsemUpgrade php7-fpmUpgrade php74-tokenizerUpgrade php8-sysvsemUpgrade php8-embedUpgrade php74-bz2Upgrade php8-sysvshmUpgrade apache2-mod_php74Upgrade php7-develUpgrade php7-wddxUpgrade php7-enchantUpgrade php74-gettextUpgrade php7-xmlwriterUpgrade php74-xmlwriterUpgrade php74-pharUpgrade php7-odbcUpgrade php7-fastcgiUpgrade php7-curlUpgrade apache2-mod_php8Upgrade php7-pharUpgrade php7-mbstringUpgrade php74-fastcgiUpgrade php8-shmopUpgrade php7-sysvmsgUpgrade php74-ldapUpgrade php74-shmopUpgrade php8-sqliteUpgrade php74-sysvsemUpgrade php7-jsonUpgrade php8-sodiumUpgrade php74-socketsUpgrade php7-shmopUpgrade php8-calendarUpgrade php8-exifUpgrade php74-develUpgrade php7-gmpUpgrade php7-zipUpgrade php74-sysvmsgUpgrade php8-xmlwriterUpgrade php8-tokenizerUpgrade php8-snmpUpgrade php7-domUpgrade php8-pcntlUpgrade php8-gdUpgrade php7-firebirdUpgrade php8-xmlreaderUpgrade php7-opcacheUpgrade php7-cliUpgrade php7-sodiumUpgrade php74-soapUpgrade php74-opensslUpgrade php7Upgrade php8-mysqlUpgrade php74Upgrade php74-posixUpgrade php8-pgsqlUpgrade php7-sysvshmUpgrade php7-testUpgrade php74-jsonUpgrade php8-soapUpgrade php8-cliUpgrade php74-calendarUpgrade php74-pgsqlUpgrade php7-gdUpgrade php74-enchantUpgrade php8-posixUpgrade php8-ctypeUpgrade php7-pearUpgrade php7-ldapUpgrade php8-xslUpgrade php74-fileinfoUpgrade php74-ftpUpgrade php7-tidyUpgrade php8-ftpUpgrade php7-gettextUpgrade php74-mbstringUpgrade php7-exifUpgrade php74-xmlrpcUpgrade php8-zipUpgrade php74-xmlreaderUpgrade php7-xmlreaderUpgrade php7-posixUpgrade php7-pear-archive_tarUpgrade php8-zlibUpgrade php7-xmlrpcUpgrade php8-mbstringUpgrade php7-opensslUpgrade php74-domUpgrade php74-sodiumUpgrade php8-odbcUpgrade php8-tidyUpgrade php8-sysvmsgUpgrade php8-domUpgrade php8-dbaUpgrade php7-bz2Upgrade php8-develUpgrade php8-iconvUpgrade php7-embedUpgrade php74-gmpUpgrade php8-opcacheUpgrade php7-sqliteUpgrade php74-zlibUpgrade php74-zipUpgrade php8-fpmUpgrade php8-bz2Upgrade php7-intlUpgrade php7-calendarUpgrade php74-exifUpgrade php7-xslUpgrade php8Upgrade php8-gettextUpgrade php8-socketsUpgrade php74-ctypeUpgrade php8-testUpgrade php8-curlUpgrade php74-intlUpgrade php74-bcmathUpgrade php7-soapUpgrade php7-pcntlUpgrade php7-readlineUpgrade php7-dba | Jan 12, 2023 | Jan 12, 2023 |
| Ubuntu | — | Upgrade php8.1Upgrade php7.4-cgiUpgrade php7.4-sqlite3Upgrade php7.0-sqlite3 (Ubuntu Pro)Upgrade php7.0 (Ubuntu Pro)Upgrade php7.0-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.0 (Ubuntu Pro)Upgrade php7.0-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.2-sqlite3Upgrade php7.0-cli (Ubuntu Pro)Upgrade php7.2-cgiUpgrade php8.1-cliUpgrade libapache2-mod-php8.1Upgrade libapache2-mod-php7.4Upgrade libapache2-mod-php8.0Upgrade php7.4Upgrade php7.2Upgrade php7.2-cliUpgrade php8.1-sqlite3Upgrade php7.0-zip (Ubuntu Pro)Upgrade php7.4-cliUpgrade php8.1-cgi | Jan 24, 2023 | Jan 11, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub