CVE-2022-31627
Heap buffer overflow in finfo_buffer
概要
Heap buffer overflow in finfo_buffer
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
影響パッケージ
Bitnami
php-min
[{"type":"SEMVER","events":[{"introduced":"8.1.0"},{"fixed":"8.1.8"}]}]
Bitnami
libphp
[{"type":"SEMVER","events":[{"introduced":"8.1.0"},{"fixed":"8.1.8"}]}]
Bitnami
php
[{"type":"SEMVER","events":[{"introduced":"8.1.0"},{"fixed":"8.1.8"}]}]
参照URL
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web bugs.php.net