Moderate: php:7.4 security update
Summary
ALSA-2022:6158: Moderate: php:7.4 security update. Affects apcu-panel versions < 5.1.18-1.module_el8.6.0+2750+78feabcb. Fixed in 5.1.18-1.module_el8.6.0+2750+78feabcb. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It allows developers to create dynamic web pages and applications. The php:7.4 package is a specific version of PHP that is affected by a moderate security vulnerability.
Vulnerability Detail
The vulnerability in the php:7.4 package is related to an uninitialized array in the pg_query_params() function, which can lead to remote code execution (RCE). An attacker could exploit this vulnerability to execute arbitrary code on the affected system, potentially gaining unauthorized access or causing other malicious activities. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is not provided in the available information.
How To Fix
Minimum fixed version
5.1.18-1.module_el8.6.0+2750+78feabcb
This is the first release that contains the fix.
sudo dnf update apcu-panelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround is mentioned in the available information. It is advised to apply the recommended fix by updating the php:7.4 package.
Conclusion
The php:7.4 package is affected by a moderate security vulnerability that can lead to remote code execution. It is recommended to update the package to the latest version to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for apcu-panel →
FAQ
PHP is an HTML-embedded scripting language commonly used for web development. It allows developers to create dynamic web pages and applications.
The vulnerability in the php:7.4 package can lead to remote code execution (RCE), allowing an attacker to execute arbitrary code on the affected system.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for open-source vulnerabilities, including this one.
The available information does not provide a CVSS score for this vulnerability.
For more details about this vulnerability, including the impact, you can refer to the CVE page for CVE-2022-31625.
Related vulnerabilities
Recent vulnerabilities recorded for apcu-panel.
