In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: php

Published: 2022-06-16T05:45:16.880236Z

Updated: 2024-09-17T03:38:54.950Z

Reserved: 2022-05-25T00:00:00

Link: CVE-2022-31626

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-16T06:15:08.807

Modified: 2024-11-21T07:04:53.017

Link: CVE-2022-31626

cve-icon Redhat

Severity : Important

Publid Date: 2022-05-16T00:00:00Z

Links: CVE-2022-31626 - Bugzilla