Wind River Support Network

HomeDefectsLIN1022-3359
Fixed

LIN1022-3359 : Security Advisory - php - CVE-2023-0567

Created: Feb 15, 2023    Updated: Nov 23, 2024
Resolved Date: Apr 3, 2023
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.

https://nvd.nist.gov/vuln/detail/CVE-2023-0567
  • Linkedin
  • Facebook
  • Twitter
  • Youtube