USN-5902-1

Dashboard / Vulnerabilities / USN-5902-1

USN-5902-1

Summary: php7.2, php7.4, php8.1 vulnerabilities

Details: It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations. (CVE-2023-0567) It was discovered that PHP incorrectly handled resolving long paths. A remote attacker could possibly use this issue to obtain or modify sensitive information. (CVE-2023-0568) It was discovered that PHP incorrectly handled a large number of parts in HTTP form uploads. A remote attacker could possibly use this issue to cause PHP to consume resources, leading to a denial of service. (CVE-2023-0662)

References: https://ubuntu.com/security/notices/USN-5902-1, https://ubuntu.com/security/CVE-2023-0567, https://ubuntu.com/security/CVE-2023-0568, https://ubuntu.com/security/CVE-2023-0662