{"id":"USN-5479-3","summary":"php7.2 regression","details":"USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for\nCVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes\nthe problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Charles Fol discovered that PHP incorrectly handled initializing certain\n arrays when handling the pg_query_params function. A remote attacker could\n use this issue to cause PHP to crash, resulting in a denial of service, or\n possibly execute arbitrary code. (CVE-2022-31625)\n \n Charles Fol discovered that PHP incorrectly handled passwords in mysqlnd. A\n remote attacker could use this issue to cause PHP to crash, resulting in a\n denial of service, or possibly execute arbitrary code. (CVE-2022-31626)\n","modified":"2026-04-27T16:12:08.650974Z","published":"2022-07-07T21:53:43Z","related":["UBUNTU-CVE-2022-31625"],"upstream":["CVE-2022-31625","UBUNTU-CVE-2022-31625"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5479-3"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-31625"}],"affected":[{"package":{"name":"php7.2","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/php7.2@7.2.24-0ubuntu0.18.04.13?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.13"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7","7.2.24-0ubuntu0.18.04.8","7.2.24-0ubuntu0.18.04.9","7.2.24-0ubuntu0.18.04.10","7.2.24-0ubuntu0.18.04.11","7.2.24-0ubuntu0.18.04.12"],"ecosystem_specific":{"binaries":[{"binary_name":"libapache2-mod-php7.2","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"libphp7.2-embed","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-bcmath","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-bz2","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-cgi","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-cli","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-common","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-curl","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-dba","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-enchant","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-fpm","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-gd","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-gmp","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-imap","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-interbase","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-intl","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-json","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-ldap","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-mbstring","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-mysql","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-odbc","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-opcache","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-pgsql","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-phpdbg","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-pspell","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-readline","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-recode","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-snmp","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-soap","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-sqlite3","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-sybase","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-tidy","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-xml","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-xmlrpc","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-xsl","binary_version":"7.2.24-0ubuntu0.18.04.13"},{"binary_name":"php7.2-zip","binary_version":"7.2.24-0ubuntu0.18.04.13"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5479-3.json","cves_map":{"ecosystem":"Ubuntu:18.04:LTS","cves":[{"id":"CVE-2022-31625","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}]}}}],"schema_version":"1.7.5"}