CVE:CVE-2022-31628
CNNVD:CNNVD-202209-2926
PHP是一种在服务器端执行的脚本语言。
PHP 7.4.31之前版本、8.0.24之前版本和8.1.11之前版本存在安全漏洞，该漏洞源于phar 解压缩器代码会递归解压缩quines gzip 文件，攻击者利用该漏洞可以导致无限循环。
solution:Upgrade php php to a higher version than 7.4.31,8.0.24,8.1.11,and avoid the version (,7.4.31),[8.0.0,8.0.24),[8.1.0,8.1.11); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0