Vulnerability · Published Feb 12, 2025 · Assigned by php

CVE-2022-31631PDO::quote() may return unquoted string

Critical 9.1

In plain English

A critical-severity injection in PHP from PHP Group. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)2.2%top 17.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8apcu-panel5.1.20-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8apcu-panel5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:9apcu-panel5.1.21-1.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8libzip1.6.1-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8libzip1.7.3-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8libzip1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8libzip1.7.3-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8libzip-devel1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8libzip-devel1.7.3-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8libzip-devel1.7.3-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8libzip-devel1.6.1-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8libzip-tools1.6.1-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8libzip-tools1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8libzip-tools1.7.3-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8libzip-tools1.7.3-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-bcmath8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-bcmath7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-bcmath8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-bcmath8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-cli7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-cli8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-cli8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-cli8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-common8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-common7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-common8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-common8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-dba7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-dba8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-dba8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-dba8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-dbg8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-dbg7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-dbg8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-dbg8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-devel7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-devel8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-devel8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-devel8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-embedded8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-embedded7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-embedded8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-embedded8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-enchant7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-enchant8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-enchant8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-enchant8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-ffi8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-ffi7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-ffi8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-ffi8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-fpm8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-fpm7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-fpm8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-fpm8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-gd7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-gd8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-gd8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-gd8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-gmp7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-gmp8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-gmp8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-gmp8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-intl8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-intl7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-intl8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-intl8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-json7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-ldap8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-ldap7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-ldap8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-ldap8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-mbstring7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-mbstring8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-mbstring8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-mbstring8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-mysqlnd7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-mysqlnd8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-mysqlnd8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-mysqlnd8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-odbc7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-odbc8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-odbc8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-odbc8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-opcache8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-opcache7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-opcache8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-opcache8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-pdo8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-pdo7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-pdo8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-pdo8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-pear1:1.10.13-1.module_el8.6.0+3268+b150a051ALSA-2023:2903
AlmaLinux:8php-pear1:1.10.13-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php-pecl-apcu5.1.18-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8php-pecl-apcu5.1.20-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8php-pecl-apcu5.1.20-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php-pecl-apcu5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:9php-pecl-apcu5.1.21-1.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8php-pecl-apcu-devel5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8php-pecl-apcu-devel5.1.20-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8php-pecl-apcu-devel5.1.20-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php-pecl-apcu-devel5.1.18-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:9php-pecl-apcu-devel5.1.21-1.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8php-pecl-rrd2.0.1-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8php-pecl-rrd2.0.3-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php-pecl-rrd2.0.1-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8php-pecl-rrd2.0.3-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8php-pecl-xdebug2.9.5-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8php-pecl-xdebug2.9.5-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8php-pecl-xdebug33.1.2-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:8php-pecl-xdebug33.1.2-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:9php-pecl-xdebug33.1.4-1.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8php-pecl-zip1.18.2-1.module_el8.6.0+3239+bedf0508ALSA-2023:2903
AlmaLinux:8php-pecl-zip1.18.2-1.module_el8.6.0+2750+78feabcbALSA-2023:2903
AlmaLinux:8php-pecl-zip1.19.2-1.module_el8.6.0+3061+6878dd1bALSA-2023:0848
AlmaLinux:8php-pecl-zip1.19.2-1.module_el8.6.0+2739+efabdb8fALSA-2023:0848
AlmaLinux:9php-pecl-zip1.20.1-1.module_el9.1.0+15+94ba28e4ALSA-2023:2417
AlmaLinux:8php-pgsql7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-pgsql8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-pgsql8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-pgsql8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-process7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-process8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-process8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-process8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-snmp7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:8php-snmp8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:9php-snmp8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-snmp8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-soap8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-soap7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-soap8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:9php-soap8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:8php-xml8.0.27-1.module_el8.7.0+3401+dfb61c00ALSA-2023:0848
AlmaLinux:8php-xml7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
AlmaLinux:9php-xml8.0.27-1.el9_1ALSA-2023:0965
AlmaLinux:9php-xml8.1.14-1.module_el9.2.0+24+ca6bd7c2ALSA-2023:2417
AlmaLinux:8php-xmlrpc7.4.33-1.module_el8.8.0+3477+f828cbb0ALSA-2023:2903
Alpine:v3.20php828.2.1-r0ALPINE-CVE-2022-31631
Alpine:v3.21php828.2.1-r0ALPINE-CVE-2022-31631
Alpine:v3.22php828.2.1-r0ALPINE-CVE-2022-31631
Debian:12php8.28.2.1-1DEBIAN-CVE-2022-31631
Rocky Linux:8libzip0:1.6.1-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:8libzip0:1.6.1-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:8libzip0:1.7.3-1.module+el8.6.0+790+fc63e43fRLSA-2023:0848
Rocky Linux:8php0:8.0.27-1.module+el8.7.0+1156+de6c8de9RLSA-2023:0848
Rocky Linux:8php0:7.4.33-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:9php0:8.0.27-1.el9_1RLSA-2023:0965
Rocky Linux:8php-pear1:1.10.13-1.module+el8.10.0+1605+02e07af7RLSA-2023:2903
Rocky Linux:8php-pear1:1.10.13-1.module+el8.7.0+1067+0a7071ccRLSA-2023:0848
Rocky Linux:8php-pear1:1.10.13-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:8php-pear1:1.10.13-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:8php-pecl-apcu0:5.1.18-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:8php-pecl-apcu0:5.1.20-1.module+el8.6.0+790+fc63e43fRLSA-2023:0848
Rocky Linux:8php-pecl-apcu0:5.1.18-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:9php-pecl-apcu0:5.1.21-1.module+el9.7.0+40003+454ed3c4RLSA-2023:2417
Rocky Linux:8php-pecl-rrd0:2.0.1-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:8php-pecl-rrd0:2.0.3-1.module+el8.6.0+790+fc63e43fRLSA-2023:0848
Rocky Linux:8php-pecl-rrd0:2.0.1-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:8php-pecl-rrd0:2.0.1-1.module+el8.4.0+414+2e7afcddRLSA-2023:2903
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40003+454ed3c4RLSA-2023:2417
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40004+bf50a568RLSA-2023:2417
Rocky Linux:9php-pecl-rrd0:2.0.3-4.module+el9.7.0+40005+715283ecRLSA-2023:2417
Rocky Linux:8php-pecl-xdebug0:2.9.5-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:8php-pecl-xdebug0:2.9.5-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:8php-pecl-xdebug30:3.1.2-1.module+el8.6.0+790+fc63e43fRLSA-2023:0848
Rocky Linux:9php-pecl-xdebug30:3.1.4-1.module+el9.7.0+40003+454ed3c4RLSA-2023:2417
Rocky Linux:8php-pecl-zip0:1.19.2-1.module+el8.6.0+790+fc63e43fRLSA-2023:0848
Rocky Linux:8php-pecl-zip0:1.18.2-1.module+el8.10.0+1604+6558efc7RLSA-2023:2903
Rocky Linux:8php-pecl-zip0:1.18.2-1.module+el8.10.0+1912+72767185RLSA-2023:2903
Rocky Linux:9php-pecl-zip0:1.20.1-1.module+el9.7.0+40003+454ed3c4RLSA-2023:2417
Ubuntu:22.04:LTSphp8.18.1.2-1ubuntu2.10UBUNTU-CVE-2022-31631
Ubuntu:22.04:LTSphp8.18.1.2-1ubuntu2.10USN-5818-1

Affected products (as reported)

VendorProductVersions
PHP Group PHP 8.0.x – before 8.0.278.1.x – before 8.1.158.2.x – before 8.2.2

Weakness: CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References