{"id":"USN-5479-2","summary":"php7.0 vulnerabilities","details":"USN-5479-1 fixed vulnerabilities in PHP. This update provides the\ncorresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Charles Fol discovered that PHP incorrectly handled initializing certain\n arrays when handling the pg_query_params function. A remote attacker could\n use this issue to cause PHP to crash, resulting in a denial of service, or\n possibly execute arbitrary code. (CVE-2022-31625)\n \n Charles Fol discovered that PHP incorrectly handled passwords in mysqlnd. A\n remote attacker could use this issue to cause PHP to crash, resulting in a\n denial of service, or possibly execute arbitrary code. (CVE-2022-31626)\n","modified":"2026-04-24T09:27:51.951742Z","published":"2022-07-04T14:10:08Z","related":["UBUNTU-CVE-2022-31625","UBUNTU-CVE-2022-31626"],"upstream":["CVE-2022-31625","CVE-2022-31626","UBUNTU-CVE-2022-31625","UBUNTU-CVE-2022-31626"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5479-2"}],"affected":[{"package":{"name":"php7.0","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/php7.0@7.0.33-0ubuntu0.16.04.16+esm4?arch=source&distro=esm-infra/xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.16+esm4"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16","7.0.33-0ubuntu0.16.04.16+esm1","7.0.33-0ubuntu0.16.04.16+esm2","7.0.33-0ubuntu0.16.04.16+esm3"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"libapache2-mod-php7.0","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"libphp7.0-embed","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-bcmath","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-bz2","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-cgi","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-cli","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-common","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-curl","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-dba","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-enchant","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-fpm","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-gd","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-gmp","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-imap","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-interbase","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-intl","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-json","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-ldap","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-mbstring","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-mcrypt","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-mysql","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-odbc","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-opcache","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-pgsql","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-phpdbg","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-pspell","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-readline","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-recode","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-snmp","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-soap","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-sqlite3","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-sybase","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-tidy","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-xml","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-xmlrpc","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-xsl","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"},{"binary_name":"php7.0-zip","binary_version":"7.0.33-0ubuntu0.16.04.16+esm4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5479-2.json","cves_map":{"ecosystem":"Ubuntu:Pro:16.04:LTS","cves":[]}}}],"schema_version":"1.7.5"}