Every CVE Search/ Get API key

CVE-2020-7070

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

4.3 MediumFix available

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

5.03%Up 2.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.3

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
CVE-2020-7070
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2020-28204 4.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
EUVD-2020-28204
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-j7r5-hm2w-qqf9 No score

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is...

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
GHSA-j7r5-hm2w-qqf9
Weakness
CWE-565
Updated
2026-11-02
NVD 4.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
CVE-2020-7070
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-20, CWE-565
Updated
2026-11-02
OSVALPINE-CVE-2020-7070 5.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
ALPINE-CVE-2020-7070
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
OSVBELL-CVE-2020-7070 5.3

CVE-2020-7070 does not affect BellSoft software

Record
BELL-CVE-2020-7070
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 28 moreShow less
OSV 5.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
CVE-2020-7070
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-7070 5.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
DEBIAN-CVE-2020-7070
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2021-1056 9.1

php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Security Fix(es):

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.(CVE-2020-7060)

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.(CVE-2020-7070)

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.(CVE-2020-7069)

Record
OESA-2021-1056
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1065 6.5

php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Security Fix(es):

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.(CVE-2020-7070)

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.(CVE-2020-7069)

Record
OESA-2021-1065
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:2992 7.5

Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update

Record
RHSA-2021:2992
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:4213 7.5

Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update

Record
RHSA-2021:4213
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2021:4213 7.5

Moderate: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.4.19). (BZ#1944110)

Security Fix(es):

  • php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)

  • php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)

  • php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)

  • php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server (CVE-2020-7070)

  • php: NULL pointer dereference in SoapClient (CVE-2021-21702)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Record
RLSA-2021:4213
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-7070 5.3

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
UBUNTU-CVE-2020-7070
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVALSA-2021:4213 No score

Moderate: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.4.19). (BZ#1944110)

Security Fix(es):

  • php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)

  • php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)

  • php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)

  • php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server (CVE-2020-7070)

  • php: NULL pointer dereference in SoapClient (CVE-2021-21702)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:4213
Updated
2026-11-02
OSVBIT-libphp-2020-7070 No score

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
BIT-libphp-2020-7070
Updated
2026-11-02
OSVBIT-php-2020-7070 No score

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
BIT-php-2020-7070
Updated
2026-11-02
OSVBIT-php-min-2020-7070 No score

PHP parses encoded cookie names so malicious `__Host-` cookies can be sent

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.

Record
BIT-php-min-2020-7070
Updated
2026-11-02
OSVCLSA-2020-1605798462 No score

Fix of 227 CVE

  • Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
  • Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  • Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
  • Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  • Fix bug #71459: Integer overflow in iptcembed()
  • Fix bug #71039: exec functions ignore length but look for NULL termination
  • Fix bug #71354: Heap corruption in tar/zip/phar parser.
  • Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  • Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
  • Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  • Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  • Fix bug #71860: Invalid memory write in phar on filename with \0 in name
  • Fix bug #71798: Integer Overflow in php_raw_url_encode
  • Fix bug #72837: integer overflow in bzdecompress caused heap corruption
  • Fix bug #72681: PHP Session Data Injection Vulnerability
  • Fix bug #72807: integer overflow in curl_escape caused heap corruption
  • Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
  • Fix bug #72697: select_colors write out-of-bounds
  • Fix bug #72730: imagegammacorrect allows arbitrary write access
  • Fix bug #72836: integer overflow in base64_decode caused heap corruption
  • Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
  • Fix bug #72849: integer overflow in urlencode caused heap corruption
  • Fix bug #72850: integer overflow in php_uuencode caused heap corruption
  • Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
  • Fix bug #72749: wddx_deserialize allows illegal memory access
  • Fix bug #72750: wddx_deserialize null dereference
  • Fix bug #72790: wddx_deserialize null dereference with invalid xml
  • Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
  • Fix bug #73189: Memcpy negative size parameter php_resolve_path
  • Fix bug #73150: missing NULL check in dom_document_save_html
  • Fix bug #73284: heap overflow in php_ereg_replace function
  • Fix bug #73218: stack-buffer-overflow through "ResourceBundle" methods
  • Fix bug #73208: integer overflow in imap_8bit caused heap corruption
  • Fix bug #73082: string length overflow in mb_encode_* function
  • Fix bug #73174: heap overflow in php_pcre_replace_impl
  • Fix bug #73276: crash in openssl_random_pseudo_bytes function
  • Fix bug #73275: crash in openssl_encrypt function
  • Fix bug #73017: memory corruption in wordwrap function
  • Fix bug #73240: Write out of bounds at number_format
  • Fix bug #73073: CachingIterator null dereference when convert to string
  • Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
  • Fix bug #73356: crash in bzcompress function
  • Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
  • Fix bug #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  • Fix bug #73144: Use-after-free in ArrayObject Deserialization
  • Fix bug #73192: parse_url return wrong hostname
  • Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
  • Fix bug #73452: Segfault (Regression for #69152)
  • Fix bug #73631: Invalid read when wddx decodes empty boolean element
  • Fix bug #67587: Redirection loop on nginx with FPM
  • Fix bug #71465: PHAR doesn't know about litespeed
  • Fix bug #73737: FPE when parsing a tag format
  • Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  • Fix bug #73869: Signed Integer Overflow gd_io.c
  • Fix bug #73773: Seg fault when loading hostile phar
  • Fix bug #70436: Use After Free Vulnerability in unserialize()
  • Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  • Fix bug #72535: arcfour encryption stream filter crashes php
  • Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria
  • Fix bug #72455: Heap Overflow due to integer overflows
  • Fix bug #74782:…
Record
CLSA-2020-1605798462
Updated
2026-11-02
OSVCLSA-2022-1643747494 No score

Fix of CVE: CVE-2020-7071, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-21702

  • CVE-2020-7068: php: Use of freed hash key in the phar_parse_zipfile function
  • CVE-2020-7069: php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
  • CVE-2020-7070: php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server
  • CVE-2020-7071: php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  • CVE-2021-21702: php: NULL pointer dereference in SoapClient
Record
CLSA-2022-1643747494
Updated
2026-11-02
OSVMGASA-2020-0387 No score

Updated php packages fix a security vulnerability

In PHP versions 7.2.x when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. (CVE-2020-7070)

These updated packages also fix several bugs: Core:

  • realpath() erroneously resolves link to link
  • Stack use-after-scope in define()
  • getimagesize function silently truncates after a null byte
  • Memleak when coercing integers to string via variadic argument

Fileinfo: finfo_file crash (FILEINFO_MIME)

LDAP: Fixed memory leaks.

OPCache: opcache.file_cache causes SIGSEGV when custom opcode handlers changed.

Standard: Memory leak in str_replace of empty string

Record
MGASA-2020-0387
Updated
2026-11-02
OSVopenSUSE-SU-2020:1703-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2020:1703-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1767-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
  • Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1767-1
Updated
2026-11-02
OSVSUSE-SU-2020:14516-1 No score

Security update for php53

This update for php53 fixes the following issues:

  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
Record
SUSE-SU-2020:14516-1
Updated
2026-11-02
OSVSUSE-SU-2020:2894-1 No score

Security update for php5

This update for php5 fixes the following issues:

  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
Record
SUSE-SU-2020:2894-1
Updated
2026-11-02
OSVSUSE-SU-2020:2896-1 No score

Security update for php74

This update for php74 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
  • Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
Record
SUSE-SU-2020:2896-1
Updated
2026-11-02
OSVSUSE-SU-2020:2920-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
  • Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
Record
SUSE-SU-2020:2920-1
Updated
2026-11-02
OSVSUSE-SU-2020:2941-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
Record
SUSE-SU-2020:2941-1
Updated
2026-11-02
OSVSUSE-SU-2020:2943-1 No score

Security update for php72

This update for php72 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
  • Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
Record
SUSE-SU-2020:2943-1
Updated
2026-11-02
OSVSUSE-SU-2020:2997-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351).
  • CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
  • Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786)
Record
SUSE-SU-2020:2997-1
Updated
2026-11-02
OSVSUSE-SU-2022:4067-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • Version update to 7.2.34 [jsc#SLE-23639]

  • CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).

  • Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).

Record
SUSE-SU-2022:4067-1
Updated
2026-11-02
OSVSUSE-SU-2022:4068-1 No score

Security update for php74

This update for php74 fixes the following issues:

  • Version update to 7.4.33:

  • CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979).

  • CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).

  • Version update to 7.4.32 (jsc#SLE-23639)

  • CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867)

  • CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)

Record
SUSE-SU-2022:4068-1
Updated
2026-11-02
OSVSUSE-SU-2022:4069-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • Version update to 7.4.33:

  • CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979).

  • CVE-2022-37454: Fixed buffer overflow in hash_update() on long parameter (bsc#1204577).

  • Version update to 7.4.32 (jsc#SLE-23639)

  • CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867)

  • CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870)

Record
SUSE-SU-2022:4069-1
Updated
2026-11-02
OSVUSN-4583-1 No score

php5, php7.0, php7.2, php7.4 vulnerabilities

It was discovered that PHP incorrectly handled certain encrypt ciphers. An attacker could possibly use this issue to decrease security or cause incorrect encryption data. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-7069)

It was discorevered that PHP incorrectly handled certain HTTP cookies. An attacker could possibly use this issue to forge cookie which is supposed to be secure. (CVE-2020-7070)

Record
USN-4583-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php7
Alpine:v3.12
 before 7.3.23-r0
7.3.23-r0
php7
Alpine:v3.13
 before 7.4.11-r0
7.4.11-r0
php7
Alpine:v3.14
 before 7.4.11-r0
7.4.11-r0
php7
Alpine:v3.15
 before 7.4.11-r0
7.4.11-r0
apcu-panel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
libzip
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-tools
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
php
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-bcmath
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
Show 278 moreShow less
Affected packages
PackageAffectedFixed
php-cli
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-common
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-dba
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-dbg
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-embedded
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-enchant
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-ffi
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-fpm
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-gd
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-gmp
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-intl
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-json
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-ldap
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-mbstring
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-mysqlnd
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-odbc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-opcache
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-pdo
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-pear
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:1.10.12-1.module_el8.6.0+2750+78feabcb
1:1.10.12-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu
AlmaLinux:8
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.0.1-1.module_el8.6.0+2750+78feabcb
2.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.0.1-1.module_el8.4.0+2229+b272fdef
2.0.1-1.module_el8.4.0+2229+b272fdef
php-pecl-rrd
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.0.1-1.module_el8.3.0+2009+b272fdef
2.0.1-1.module_el8.3.0+2009+b272fdef
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.9.5-1.module_el8.6.0+2750+78feabcb
2.9.5-1.module_el8.6.0+2750+78feabcb
php-pecl-zip
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.18.2-1.module_el8.6.0+2750+78feabcb
1.18.2-1.module_el8.6.0+2750+78feabcb
php-pgsql
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-process
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-snmp
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-soap
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-xml
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
php-xmlrpc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 7.4.19-3.module_el8.6.0+2976+8b9a0d08
7.4.19-3.module_el8.6.0+2976+8b9a0d08
libphp
Bitnami
 7.2.0 up to 7.2.34, 7.3.0 up to 7.3.23, 7.4.0 up to 7.4.11
7.2.347.3.237.4.11
php
Bitnami
 7.2.0 up to 7.2.34, 7.3.0 up to 7.3.23, 7.4.0 up to 7.4.11
7.2.347.3.237.4.11
php-min
Bitnami
 7.2.0 up to 7.2.34, 7.3.0 up to 7.3.23, 7.4.0 up to 7.4.11
7.2.347.3.237.4.11
php
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-bcmath
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-cli
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-common
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-dba
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-devel
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-embedded
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-enchant
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-fpm
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-gd
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-imap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-intl
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-ldap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mbstring
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mysql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-odbc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pdo
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pgsql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-process
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pspell
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-recode
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-snmp
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-soap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-tidy
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xml
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xmlrpc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-zts
TuxCare:CentOS:6
From an advisory covering 70 CVEs
 before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
apcu-panel
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.4.0+2001+2eb69d76
5.1.18-1.module_el8.4.0+2001+2eb69d76
libzip
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.4.0+2001+2eb69d76
1.6.1-1.module_el8.4.0+2001+2eb69d76
libzip-devel
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.4.0+2001+2eb69d76
1.6.1-1.module_el8.4.0+2001+2eb69d76
libzip-tools
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 1.6.1-1.module_el8.4.0+2001+2eb69d76
1.6.1-1.module_el8.4.0+2001+2eb69d76
php
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-bcmath
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-cli
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-common
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-dba
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-dbg
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-devel
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-embedded
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-enchant
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-ffi
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-fpm
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-gd
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-gmp
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-intl
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-json
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-ldap
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-mbstring
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-mysqlnd
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-odbc
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-opcache
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-pdo
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-pear
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 1:1.10.12-1.module_el8.4.0+2001+2eb69d76
1:1.10.12-1.module_el8.4.0+2001+2eb69d76
php-pecl-apcu
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.4.0+2001+2eb69d76
5.1.18-1.module_el8.4.0+2001+2eb69d76
php-pecl-apcu-devel
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 5.1.18-1.module_el8.4.0+2001+2eb69d76
5.1.18-1.module_el8.4.0+2001+2eb69d76
php-pecl-rrd
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 2.0.1-1.module_el8.4.0+2001+2eb69d76
2.0.1-1.module_el8.4.0+2001+2eb69d76
php-pecl-xdebug
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 2.9.5-1.module_el8.4.0+2001+2eb69d76
2.9.5-1.module_el8.4.0+2001+2eb69d76
php-pecl-zip
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 1.18.2-1.module_el8.4.0+2001+2eb69d76
1.18.2-1.module_el8.4.0+2001+2eb69d76
php-pgsql
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-process
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-snmp
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-soap
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-xml
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php-xmlrpc
TuxCare:CentOS:8.4
From an advisory covering 5 CVEs
 before 7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
7.4.6-4.module_el8.4.0+2001+2eb69d76.tuxcare.els1
php7.4
Debian:11
 before 7.4.11-1
7.4.11-1
php7.0
Debian:9
 before 7.0.33-0+deb9u10, plus listed versions
7.0.19-17.0.20-17.0.20-27.0.22-17.0.22-2
Show 20 moreShow less
7.0.22-37.0.25-17.0.26-17.0.27-0+deb9u17.0.27-17.0.28-17.0.29-17.0.30-0+deb9u17.0.30-17.0.30-27.0.31-17.0.32-17.0.33-0+deb9u17.0.33-0+deb9u27.0.33-0+deb9u37.0.33-0+deb9u57.0.33-0+deb9u67.0.33-0+deb9u77.0.33-0+deb9u87.0.33-0+deb9u9
7.0.33-0+deb9u10
php7.3
Debian:10
From an advisory covering 5 CVEs
 before 7.3.27-1~deb10u1, plus listed versions
7.3.10-17.3.11-1~deb10u17.3.12-17.3.14-1~deb10u17.3.15-1
Show 8 moreShow less
7.3.15-27.3.15-37.3.19-1~deb10u17.3.4-27.3.6-17.3.8-17.3.9-17.3.9-1~deb10u1
7.3.27-1~deb10u1
php
Mageia:7
 before 7.3.23-1.mga7
7.3.23-1.mga7
php
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 7.2.10-13.oe1
7.2.10-13.oe1
php
openEuler:20.03-LTS
From an advisory covering 2 CVEs
 before 7.2.10-12.oe1
7.2.10-12.oe1
rh-php73-php
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-bcmath
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-cli
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-dba
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-dbg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-embedded
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-enchant
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-fpm
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-gd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-gmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-intl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-mbstring
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-odbc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-opcache
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-pdo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-pgsql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-process
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-pspell
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-recode
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-snmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-soap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-xml
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
rh-php73-php-zip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 6 CVEs
 before 0:7.3.29-1.el7
0:7.3.29-1.el7
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-ffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-ffi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 1:1.10.12-1.module+el8.3.0+6678+b09f589e
1:1.10.12-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-soap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-soap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-xml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-xml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
php-xmlrpc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+11143+cc873159
0:7.4.19-1.module+el8.5.0+11143+cc873159
libzip
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.6.0+789+2130c178
0:1.6.1-1.module+el8.6.0+789+2130c178
libzip
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.6.1-1.module+el8.4.0+415+e936cba3
0:1.6.1-1.module+el8.4.0+415+e936cba3
php
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:7.4.19-1.module+el8.5.0+696+61e7c9ba
0:7.4.19-1.module+el8.5.0+696+61e7c9ba
php-pear
Rocky Linux:8
From an advisory covering 5 CVEs
 before 1:1.10.12-1.module+el8.4.0+415+e936cba3
1:1.10.12-1.module+el8.4.0+415+e936cba3
php-pear
Rocky Linux:8
From an advisory covering 5 CVEs
 before 1:1.10.12-1.module+el8.6.0+789+2130c178
1:1.10.12-1.module+el8.6.0+789+2130c178
php-pecl-apcu
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.6.0+789+2130c178
0:5.1.18-1.module+el8.6.0+789+2130c178
php-pecl-apcu
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:5.1.18-1.module+el8.4.0+415+e936cba3
0:5.1.18-1.module+el8.4.0+415+e936cba3
php-pecl-rrd
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.9.5-1.module+el8.4.0+415+e936cba3
0:2.9.5-1.module+el8.4.0+415+e936cba3
php-pecl-zip
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.18.2-1.module+el8.6.0+789+2130c178
0:1.18.2-1.module+el8.6.0+789+2130c178
php-pecl-zip
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.18.2-1.module+el8.4.0+415+e936cba3
0:1.18.2-1.module+el8.4.0+415+e936cba3
php53
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 5.3.17-112.93.1
5.3.17-112.93.1
php53
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 5.3.17-112.93.1
5.3.17-112.93.1
php5
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 5.5.14-109.82.1
5.5.14-109.82.1
php74
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 2 CVEs
 before 7.4.6-1.13.1
7.4.6-1.13.1
php74
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 7.4.6-1.13.1
7.4.6-1.13.1
php7
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 7.0.7-50.102.1
7.0.7-50.102.1
php7
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 7.0.7-50.102.1
7.0.7-50.102.1
php7
SUSE:Linux Enterprise Module for Package Hub 15 SP2
From an advisory covering 2 CVEs
 before 7.4.6-3.11.1
7.4.6-3.11.1
php7
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
From an advisory covering 2 CVEs
 before 7.4.6-3.11.1
7.4.6-3.11.1
php72
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 2 CVEs
 before 7.2.5-1.54.1
7.2.5-1.54.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 7.2.5-1.54.1
7.2.5-1.54.1
php7
SUSE:Linux Enterprise Module for Package Hub 15 SP1
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise Module for Web and Scripting 15 SP1
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 7.2.5-4.67.2
7.2.5-4.67.2
php7
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Enterprise Storage 6
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
openSUSE:Leap 15.4
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php74
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 18 CVEs
 before 7.4.33-1.47.2
7.4.33-1.47.2
php74
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 18 CVEs
 before 7.4.33-1.47.2
7.4.33-1.47.2
php7
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise Module for Web and Scripting 15 SP3
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Manager Proxy 4.1
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Manager Server 4.1
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
SUSE:Enterprise Storage 7
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
openSUSE:Leap 15.3
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7-test
openSUSE:Leap 15.3
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php7
openSUSE:Leap 15.4
From an advisory covering 18 CVEs
 before 7.4.33-150200.3.46.2
7.4.33-150200.3.46.2
php5
Ubuntu:Pro:14.04:LTS
 before 5.5.9+dfsg-1ubuntu4.29+esm13, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 38 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.275.5.9+dfsg-1ubuntu4.295.5.9+dfsg-1ubuntu4.29+esm15.5.9+dfsg-1ubuntu4.29+esm25.5.9+dfsg-1ubuntu4.29+esm35.5.9+dfsg-1ubuntu4.29+esm45.5.9+dfsg-1ubuntu4.29+esm55.5.9+dfsg-1ubuntu4.29+esm65.5.9+dfsg-1ubuntu4.29+esm85.5.9+dfsg-1ubuntu4.29+esm105.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm12
5.5.9+dfsg-1ubuntu4.29+esm13
php7.0
Ubuntu:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.16, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 34 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.15
7.0.33-0ubuntu0.16.04.16
php7.2
Ubuntu:18.04:LTS
 before 7.2.24-0ubuntu0.18.04.7, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 13 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.6
7.2.24-0ubuntu0.18.04.7
php7.4
Ubuntu:20.04:LTS
 before 7.4.3-4ubuntu2.4, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
7.4.3-4ubuntu2.4
php5
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 5.5.9+dfsg-1ubuntu4.29+esm13, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 38 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.275.5.9+dfsg-1ubuntu4.295.5.9+dfsg-1ubuntu4.29+esm15.5.9+dfsg-1ubuntu4.29+esm25.5.9+dfsg-1ubuntu4.29+esm35.5.9+dfsg-1ubuntu4.29+esm45.5.9+dfsg-1ubuntu4.29+esm55.5.9+dfsg-1ubuntu4.29+esm65.5.9+dfsg-1ubuntu4.29+esm85.5.9+dfsg-1ubuntu4.29+esm105.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm12
5.5.9+dfsg-1ubuntu4.29+esm13
php7.0
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 7.0.33-0ubuntu0.16.04.16, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 34 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.15
7.0.33-0ubuntu0.16.04.16
php7.2
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.7, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 13 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.6
7.2.24-0ubuntu0.18.04.7
php7.4
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 7.4.3-4ubuntu2.4, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
7.4.3-4ubuntu2.4
php7
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 7.4.6-lp152.2.9.1
7.4.6-lp152.2.9.1
php7-test
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 7.4.6-lp152.2.9.1
7.4.6-lp152.2.9.1
php7
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 7.2.5-lp151.6.36.7
7.2.5-lp151.6.36.7
php7-test
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 7.2.5-lp151.6.36.7
7.2.5-lp151.6.36.7

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-7070 is a medium vulnerability (CVSS 4.3) in Php, published October 2, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.03%, the 92nd percentile. Fixed in php7 7.3.23-r0.

References

Show 141 moreShow less
This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open