← Database

CVE-2022-31628

LOW CVSS: 2.3 Published: 2022-09-28 Modified: 2026-06-17

Description

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

Affected Platforms

Debian Debian LinuxPhp PhpFedoraproject Fedora

Weakness Type

CWE-674, CWE-835

References