CVE Vulnerabilities

CVE-2022-31628

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Sep 28, 2022 | Modified: Nov 07, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite loop.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Php Php * 7.4.31 (excluding)
Php Php 8.0.0 (including) 8.0.24 (excluding)
Php Php 8.1.0 (including) 8.1.11 (excluding)

References