Every CVE Search/ Get API key

CVE-2020-28948

Deserialization of Untrusted Data in Archive_Tar

7.8 HighPublic exploitFix available

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

47.5%Up 45.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
CVE-2020-28948
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-502
Updated
2026-11-02
CVE List No score

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
CVE-2020-28948
Updated
2026-11-02
EUVDEUVD-2021-0841 No score

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
EUVD-2021-0841
Updated
2026-11-03
GitHub AdvisoriesGHSA-jh5x-hfhg-78jq 7.8

Deserialization of Untrusted Data in Archive_Tar

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. See: https://github.com/pear/Archive_Tar/issues/33

Record
GHSA-jh5x-hfhg-78jq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
OSVALPINE-CVE-2020-28948 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
ALPINE-CVE-2020-28948
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
CVE-2020-28948
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVCVE-2020-28949 7.8

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

Record
CVE-2020-28949
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-28948 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
DEBIAN-CVE-2020-28948
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-75c5-f4gw-38r9 7.8

Multiple vulnerabilities through filename manipulation in Archive_Tar

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. See: https://github.com/pear/Archive_Tar/issues/33

Record
GHSA-75c5-f4gw-38r9
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H
Weakness
CWE-74
Updated
2026-11-02
OSVGHSA-jh5x-hfhg-78jq 7.8

Deserialization of Untrusted Data in Archive_Tar

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. See: https://github.com/pear/Archive_Tar/issues/33

Record
GHSA-jh5x-hfhg-78jq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
OSVRHSA-2022:6541 7.8

Red Hat Security Advisory: php:7.4 security update

Record
RHSA-2022:6541
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:6542 7.8

Red Hat Security Advisory: php:7.4 security update

Record
RHSA-2022:6542
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7340 7.8

Red Hat Security Advisory: php-pear security update

Record
RHSA-2022:7340
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:6542 7.8

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)

  • Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)

  • Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:6542
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-28948 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
UBUNTU-CVE-2020-28948
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:6542 No score

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
  • Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
  • Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:6542
Updated
2026-11-02
OSVBIT-drupal-2020-28948 No score

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Record
BIT-drupal-2020-28948
Updated
2026-11-02
OSVBIT-drupal-2020-28949 No score

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

Record
BIT-drupal-2020-28949
Updated
2026-11-02
OSVDRUPAL-CORE-2020-013 No score

The Drupal project uses the PEAR Archive_Tar library. The PEAR Archive_Tar library has released a security update that impacts Drupal. For more information please see:

Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2, or .tlz file uploads and processes them.

To mitigate this issue, prevent untrusted users from uploading .tar, .tar.gz, .bz2, or .tlz files.

This is a different issue than SA-CORE-2019-012. Similar configuration changes may mitigate the problem until you are able to patch.

Record
DRUPAL-CORE-2020-013
Updated
2026-11-02
OSVMGASA-2020-0453 No score

Updated php-pear packages fix security vulnerabilities

Filename manipulation vulnerabilities (CVE-2020-28948 / CVE-2020-28949) Updated also Archive_Tar to 1.4.11.

Record
MGASA-2020-0453
Updated
2026-11-02
OSVUSN-4654-1 No score

php-pear vulnerabilities

It was discovered that PEAR incorrectly sanitized filenames. A remote attacker could possibly use this issue to execute arbitrary code.

Record
USN-4654-1
Updated
2026-11-02
OSVUSN-6981-1 No score

drupal7 vulnerabilities

It was discovered that Drupal incorrectly sanitized uploaded filenames. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2020-13671)

It was discovered that Drupal incorrectly sanitized archived filenames. A remote attacker could possibly use this issue to overwrite arbitrary files, or execute arbitrary code. (CVE-2020-28948, CVE-2020-28949)

Record
USN-6981-1
Updated
2026-11-02
OSVUSN-6981-2 No score

drupal7 vulnerabilities

USN-6981-1 fixed vulnerabilities in Drupal. This update provides the corresponding updates for Ubuntu 14.04 LTS.

Original advisory details:

It was discovered that Drupal incorrectly sanitized uploaded filenames. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2020-13671)

It was discovered that Drupal incorrectly sanitized archived filenames. A remote attacker could possibly use this issue to overwrite arbitrary files, or execute arbitrary code. (CVE-2020-28948, CVE-2020-28949)

Record
USN-6981-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pear/archive_tar
Packagist
 before 1.4.11
1.4.11
drupal7
Alpine:v3.11
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.12
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.13
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.14
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.15
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.16
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.17
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.18
 before 7.75-r0
7.75-r0
drupal7
Alpine:v3.19
 before 7.75-r0
7.75-r0
Show 256 moreShow less
Affected packages
PackageAffectedFixed
drupal7
Alpine:v3.20
 before 7.75-r0
7.75-r0
apcu-panel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
libzip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
php
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-bcmath
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-bcmath
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-cli
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-cli
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dba
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dba
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-dbg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dbg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-embedded
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-embedded
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-enchant
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-enchant
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-fpm
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-fpm
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-gd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-gd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-gmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-gmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-intl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-intl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-ldap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ldap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-mbstring
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-mbstring
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-mysqlnd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-mysqlnd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-odbc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-odbc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-opcache
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-opcache
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pdo
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pdo
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-pear
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module_el8.6.0+3268+b150a051
1:1.10.13-1.module_el8.6.0+3268+b150a051
php-pecl-apcu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+3239+bedf0508
5.1.18-1.module_el8.6.0+3239+bedf0508
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+3239+bedf0508
5.1.18-1.module_el8.6.0+3239+bedf0508
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.1-1.module_el8.6.0+2750+78feabcb
2.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.1-1.module_el8.6.0+3239+bedf0508
2.0.1-1.module_el8.6.0+3239+bedf0508
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.9.5-1.module_el8.6.0+3239+bedf0508
2.9.5-1.module_el8.6.0+3239+bedf0508
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.9.5-1.module_el8.6.0+2750+78feabcb
2.9.5-1.module_el8.6.0+2750+78feabcb
php-pecl-zip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.18.2-1.module_el8.6.0+2750+78feabcb
1.18.2-1.module_el8.6.0+2750+78feabcb
php-pecl-zip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.18.2-1.module_el8.6.0+3239+bedf0508
1.18.2-1.module_el8.6.0+3239+bedf0508
php-pgsql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pgsql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-process
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-process
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-snmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-snmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-soap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-soap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-xml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-xml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-xmlrpc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-xmlrpc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
drupal
Bitnami
From an advisory covering 2 CVEs
 7.0.0 up to 7.75.0, 8.0.0 up to 8.9.10, 9.0.0 up to 9.0.9
7.75.08.9.109.0.9
php-pear
Debian:12
 before 1:1.10.9+submodules+notgz-1.1
1:1.10.9+submodules+notgz-1.1
php-pear
Debian:13
 before 1:1.10.9+submodules+notgz-1.1
1:1.10.9+submodules+notgz-1.1
php-pear
Debian:14
 before 1:1.10.9+submodules+notgz-1.1
1:1.10.9+submodules+notgz-1.1
php-pear
Debian:9
From an advisory covering 2 CVEs
 before 1:1.10.1+submodules+notgz-9+deb9u2, plus listed versions
1:1.10.1+submodules+notgz-91:1.10.1+submodules+notgz-9+deb9u1
1:1.10.1+submodules+notgz-9+deb9u2
drupal7
Debian:9
From an advisory covering 2 CVEs
 before 7.52-2+deb9u13, plus listed versions
7.52-27.52-2+deb9u17.52-2+deb9u107.52-2+deb9u117.52-2+deb9u12
Show 8 moreShow less
7.52-2+deb9u27.52-2+deb9u37.52-2+deb9u47.52-2+deb9u57.52-2+deb9u67.52-2+deb9u77.52-2+deb9u87.52-2+deb9u9
7.52-2+deb9u13
drupal/core
Packagist
From an advisory covering 2 CVEs
 8.0.0 up to 8.8.12, 8.9.0 up to 8.9.10, 9.0.0 up to 9.0.9, plus listed versions
8.0.18.0.28.0.38.0.48.0.5
Show 45 moreShow less
8.0.68.1.08.1.0-beta18.1.0-beta28.1.0-rc18.1.18.1.108.1.28.1.38.1.48.1.58.1.68.1.78.1.88.1.98.2.08.2.0-beta18.2.0-beta28.2.0-beta38.2.0-rc18.2.0-rc28.2.18.2.28.2.38.2.48.2.58.2.68.2.78.2.88.3.08.3.0-alpha18.3.0-beta18.3.0-rc18.3.0-rc28.3.18.3.28.3.38.3.48.3.58.3.68.3.78.3.88.3.98.4.08.4.0-alpha1
8.8.128.9.109.0.9
php-pear
Debian:10
From an advisory covering 2 CVEs
 before 1:1.10.6+submodules+notgz-1.1+deb10u1, plus listed versions
1:1.10.6+submodules+notgz-1.1
1:1.10.6+submodules+notgz-1.1+deb10u1
pear/archive_tar
Packagist
From an advisory covering 2 CVEs
 before 1.4.11, plus listed versions
1.3.111.3.121.3.131.3.141.3.15
Show 12 moreShow less
1.3.161.4.01.4.11.4.101.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.9
1.4.11
php-pear
Mageia:7
From an advisory covering 2 CVEs
 before 1.10.9-1.1.mga7
1.10.9-1.1.mga7
apcu-panel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
php
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-bcmath
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-bcmath-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-cli
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-cli-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-common
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-common-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dba
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dba-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dbg
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dbg-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-embedded
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-embedded-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-enchant
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-enchant-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ffi
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ffi-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-fpm
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-fpm-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-intl
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-intl-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-json
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-json-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ldap
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ldap-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mbstring
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mbstring-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mysqlnd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mysqlnd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-odbc
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-odbc-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-opcache
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-opcache-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pdo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pdo-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pear
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.4.0+16578+ed65e99e
1:1.10.13-1.module+el8.4.0+16578+ed65e99e
php-pecl-apcu
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pgsql-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-process
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-process-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-snmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-snmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-soap
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-soap-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xml
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xml-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xmlrpc
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xmlrpc-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ffi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.6.0+16577+0788886f
1:1.10.13-1.module+el8.6.0+16577+0788886f
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-soap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-soap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xmlrpc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pear
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 1:1.9.4-23.el7_9
1:1.9.4-23.el7_9
php-pear
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 1:1.9.4-23.el7_9
1:1.9.4-23.el7_9
libzip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.6.0+789+2130c178
0:1.6.1-1.module+el8.6.0+789+2130c178
libzip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.4.0+415+e936cba3
0:1.6.1-1.module+el8.4.0+415+e936cba3
php
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+1006+0d5a469f
0:7.4.19-4.module+el8.6.0+1006+0d5a469f
php-pear
Rocky Linux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.7.0+1067+0a7071cc
1:1.10.13-1.module+el8.7.0+1067+0a7071cc
php-pear
Rocky Linux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.6.0+1006+0d5a469f
1:1.10.13-1.module+el8.6.0+1006+0d5a469f
php-pecl-apcu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.6.0+789+2130c178
0:5.1.18-1.module+el8.6.0+789+2130c178
php-pecl-apcu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.4.0+415+e936cba3
0:5.1.18-1.module+el8.4.0+415+e936cba3
php-pecl-rrd
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.4.0+415+e936cba3
0:2.9.5-1.module+el8.4.0+415+e936cba3
php-pecl-zip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.6.0+789+2130c178
0:1.18.2-1.module+el8.6.0+789+2130c178
php-pecl-zip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.4.0+415+e936cba3
0:1.18.2-1.module+el8.4.0+415+e936cba3
drupal7
Ubuntu:Pro:14.04:LTS
 before 7.26-1ubuntu0.1+esm2, plus listed versions
7.23-17.24-17.24-27.26-17.26-1ubuntu0.17.26-1ubuntu0.1+esm1
7.26-1ubuntu0.1+esm2
php-pear
Ubuntu:16.04:LTS
 before 1:1.10.1+submodules+notgz-6ubuntu0.2, plus listed versions
1:1.10.1+submodules+notgz-41:1.10.1+submodules+notgz-61:1.10.1+submodules+notgz-6ubuntu0.1
1:1.10.1+submodules+notgz-6ubuntu0.2
drupal7
Ubuntu:Pro:16.04:LTS
 before 7.44-1ubuntu1~16.04.0+esm2, plus listed versions
7.38-17.41-17.44-1ubuntu1~16.04.07.44-1ubuntu1~16.04.0+esm1
7.44-1ubuntu1~16.04.0+esm2
php-pear
Ubuntu:18.04:LTS
 before 1:1.10.5+submodules+notgz-1ubuntu1.18.04.2, plus listed versions
1:1.10.5+submodules+notgz-11:1.10.5+submodules+notgz-1ubuntu11:1.10.5+submodules+notgz-1ubuntu1.18.04.1
1:1.10.5+submodules+notgz-1ubuntu1.18.04.2
php-pear
Ubuntu:20.04:LTS
 before 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1, plus listed versions
1:1.10.9+submodules+notgz-1
1:1.10.9+submodules+notgz-1ubuntu0.20.04.1
php-pear
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 1:1.10.1+submodules+notgz-6ubuntu0.2, plus listed versions
1:1.10.1+submodules+notgz-41:1.10.1+submodules+notgz-61:1.10.1+submodules+notgz-6ubuntu0.1
1:1.10.1+submodules+notgz-6ubuntu0.2
php-pear
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 1:1.10.5+submodules+notgz-1ubuntu1.18.04.2, plus listed versions
1:1.10.5+submodules+notgz-11:1.10.5+submodules+notgz-1ubuntu11:1.10.5+submodules+notgz-1ubuntu1.18.04.1
1:1.10.5+submodules+notgz-1ubuntu1.18.04.2
php-pear
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1, plus listed versions
1:1.10.9+submodules+notgz-1
1:1.10.9+submodules+notgz-1ubuntu0.20.04.1
drupal7
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 7.44-1ubuntu1~16.04.0+esm2, plus listed versions
7.38-17.41-17.44-1ubuntu1~16.04.07.44-1ubuntu1~16.04.0+esm1
7.44-1ubuntu1~16.04.0+esm2
drupal7
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 7.26-1ubuntu0.1+esm2, plus listed versions
7.23-17.24-17.24-27.26-17.26-1ubuntu0.17.26-1ubuntu0.1+esm1
7.26-1ubuntu0.1+esm2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHub0x240x23elu/CVE-2020-28948-and-CVE-2020-289492020-11-27
PoC in GitHubnopdata/cve-2020-289482021-05-24
PoC in GitHubJinHao-L/PoC-for-CVE-2020-28948-CVE-2020-289492022-10-03

History

History
RecordedChangedSources
affected
facts
affected, aliases, exploits, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-28948 is a high vulnerability (CVSS 7.8) in Debian Linux, published November 19, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 47.5%, the 98th percentile. Fixed in pear/archive_tar 1.4.11.

References

Show 54 moreShow less
This page doesn't list everything

Left out here: 105 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open