Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ALAS-2023-2375

Related Vulnerabilities: CVE-2017-9228   CVE-2017-9229   CVE-2022-31625   CVE-2023-0662  

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption. (CVE-2017-9228) An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition. (CVE-2017-9229) A vulnerability was found in PHP due to an uninitialized array in pg_query_params() function. When using the Postgres database extension, supplying invalid parameters to the parameterized query may lead to PHP attempting to free memory, using uninitialized data as pointers. This flaw allows a remote attacker with the ability to control query parameters to execute arbitrary code on the system or may cause a denial of service. (CVE-2022-31625) In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. (CVE-2023-0662)

Source

ALAS-2023-2375

Amazon Linux 2 Security Advisory: ALAS-2023-2375
Advisory Release Date: 2023-11-29 22:20 Pacific
Advisory Updated Date: 2023-12-04 21:46 Pacific
Severity: Important
Issue Overview:

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption. (CVE-2017-9228)

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition. (CVE-2017-9229)

A vulnerability was found in PHP due to an uninitialized array in pg_query_params() function. When using the Postgres database extension, supplying invalid parameters to the parameterized query may lead to PHP attempting to free memory, using uninitialized data as pointers. This flaw allows a remote attacker with the ability to control query parameters to execute arbitrary code on the system or may cause a denial of service. (CVE-2022-31625)

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. (CVE-2023-0662)


Affected Packages:

php


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update php to update your system.

New Packages:
aarch64:
    php-5.4.16-46.amzn2.0.3.aarch64
    php-cli-5.4.16-46.amzn2.0.3.aarch64
    php-fpm-5.4.16-46.amzn2.0.3.aarch64
    php-common-5.4.16-46.amzn2.0.3.aarch64
    php-devel-5.4.16-46.amzn2.0.3.aarch64
    php-ldap-5.4.16-46.amzn2.0.3.aarch64
    php-pdo-5.4.16-46.amzn2.0.3.aarch64
    php-mysqlnd-5.4.16-46.amzn2.0.3.aarch64
    php-pgsql-5.4.16-46.amzn2.0.3.aarch64
    php-process-5.4.16-46.amzn2.0.3.aarch64
    php-odbc-5.4.16-46.amzn2.0.3.aarch64
    php-soap-5.4.16-46.amzn2.0.3.aarch64
    php-snmp-5.4.16-46.amzn2.0.3.aarch64
    php-xml-5.4.16-46.amzn2.0.3.aarch64
    php-xmlrpc-5.4.16-46.amzn2.0.3.aarch64
    php-mbstring-5.4.16-46.amzn2.0.3.aarch64
    php-gd-5.4.16-46.amzn2.0.3.aarch64
    php-bcmath-5.4.16-46.amzn2.0.3.aarch64
    php-dba-5.4.16-46.amzn2.0.3.aarch64
    php-embedded-5.4.16-46.amzn2.0.3.aarch64
    php-pspell-5.4.16-46.amzn2.0.3.aarch64
    php-recode-5.4.16-46.amzn2.0.3.aarch64
    php-intl-5.4.16-46.amzn2.0.3.aarch64
    php-enchant-5.4.16-46.amzn2.0.3.aarch64
    php-debuginfo-5.4.16-46.amzn2.0.3.aarch64

i686:
    php-5.4.16-46.amzn2.0.3.i686
    php-cli-5.4.16-46.amzn2.0.3.i686
    php-fpm-5.4.16-46.amzn2.0.3.i686
    php-common-5.4.16-46.amzn2.0.3.i686
    php-devel-5.4.16-46.amzn2.0.3.i686
    php-ldap-5.4.16-46.amzn2.0.3.i686
    php-pdo-5.4.16-46.amzn2.0.3.i686
    php-mysqlnd-5.4.16-46.amzn2.0.3.i686
    php-pgsql-5.4.16-46.amzn2.0.3.i686
    php-process-5.4.16-46.amzn2.0.3.i686
    php-odbc-5.4.16-46.amzn2.0.3.i686
    php-soap-5.4.16-46.amzn2.0.3.i686
    php-snmp-5.4.16-46.amzn2.0.3.i686
    php-xml-5.4.16-46.amzn2.0.3.i686
    php-xmlrpc-5.4.16-46.amzn2.0.3.i686
    php-mbstring-5.4.16-46.amzn2.0.3.i686
    php-gd-5.4.16-46.amzn2.0.3.i686
    php-bcmath-5.4.16-46.amzn2.0.3.i686
    php-dba-5.4.16-46.amzn2.0.3.i686
    php-embedded-5.4.16-46.amzn2.0.3.i686
    php-pspell-5.4.16-46.amzn2.0.3.i686
    php-recode-5.4.16-46.amzn2.0.3.i686
    php-intl-5.4.16-46.amzn2.0.3.i686
    php-enchant-5.4.16-46.amzn2.0.3.i686
    php-debuginfo-5.4.16-46.amzn2.0.3.i686

src:
    php-5.4.16-46.amzn2.0.3.src

x86_64:
    php-5.4.16-46.amzn2.0.3.x86_64
    php-cli-5.4.16-46.amzn2.0.3.x86_64
    php-fpm-5.4.16-46.amzn2.0.3.x86_64
    php-common-5.4.16-46.amzn2.0.3.x86_64
    php-devel-5.4.16-46.amzn2.0.3.x86_64
    php-ldap-5.4.16-46.amzn2.0.3.x86_64
    php-pdo-5.4.16-46.amzn2.0.3.x86_64
    php-mysqlnd-5.4.16-46.amzn2.0.3.x86_64
    php-pgsql-5.4.16-46.amzn2.0.3.x86_64
    php-process-5.4.16-46.amzn2.0.3.x86_64
    php-odbc-5.4.16-46.amzn2.0.3.x86_64
    php-soap-5.4.16-46.amzn2.0.3.x86_64
    php-snmp-5.4.16-46.amzn2.0.3.x86_64
    php-xml-5.4.16-46.amzn2.0.3.x86_64
    php-xmlrpc-5.4.16-46.amzn2.0.3.x86_64
    php-mbstring-5.4.16-46.amzn2.0.3.x86_64
    php-gd-5.4.16-46.amzn2.0.3.x86_64
    php-bcmath-5.4.16-46.amzn2.0.3.x86_64
    php-dba-5.4.16-46.amzn2.0.3.x86_64
    php-embedded-5.4.16-46.amzn2.0.3.x86_64
    php-pspell-5.4.16-46.amzn2.0.3.x86_64
    php-recode-5.4.16-46.amzn2.0.3.x86_64
    php-intl-5.4.16-46.amzn2.0.3.x86_64
    php-enchant-5.4.16-46.amzn2.0.3.x86_64
    php-debuginfo-5.4.16-46.amzn2.0.3.x86_64

Additional References

Red Hat: CVE-2017-9228, CVE-2017-9229, CVE-2022-31625, CVE-2023-0662

Mitre: CVE-2017-9228, CVE-2017-9229, CVE-2022-31625, CVE-2023-0662

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started