NetSight
IP …
low2.3

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

Impact

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

Affected products

VendorProductAffected versions
PhpPhp
before 7.4.31
from 8.0.0 before 8.0.24
from 8.1.0 before 8.1.11
FedoraprojectFedora
Versions 35, 36, 37
DebianDebian Linux
Versions 10.0, 11.0

Weakness classification

CWE-674CWE-835

References