Every CVE Search/ Get API key

CVE-2022-4900

Potential buffer overflow in php_cli_server_startup_workers

6.2 MediumFix available

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.37%Up 0.3 points since Nov 3, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.2

Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
CVE-2022-4900
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2022-52156 6.2

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
EUVD-2022-52156
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-95cc-jq89-8hvw 6.2

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to...

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
GHSA-95cc-jq89-8hvw
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119, CWE-787
Updated
2026-11-02
NVD 6.2

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
CVE-2022-4900
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119, CWE-787
Updated
2026-11-02
OSVBELL-CVE-2022-4900 5.5

CVE-2022-4900 does not affect BellSoft software

Record
BELL-CVE-2022-4900
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.2

Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
CVE-2022-4900
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-05
Show 14 moreShow less
OSVDEBIAN-CVE-2022-4900 5.5

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
DEBIAN-CVE-2022-4900
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0848 8.1

Red Hat Security Advisory: php:8.0 security update

Record
RHSA-2023:0848
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-4900 5.5

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
UBUNTU-CVE-2022-4900
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:0848 No score

Moderate: php:8.0 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)

Security Fix(es):

  • XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
  • php: standard insecure cookie could be treated as a __Host- or __Secure- cookie by PHP applications (CVE-2022-31629)
  • php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
  • php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)
  • php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0848
Updated
2026-11-05
OSVBIT-libphp-2022-4900 No score

Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
BIT-libphp-2022-4900
Updated
2026-11-02
OSVBIT-php-2022-4900 No score

Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
BIT-php-2022-4900
Updated
2026-11-02
OSVBIT-php-min-2022-4900 No score

Potential buffer overflow in php_cli_server_startup_workers

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

Record
BIT-php-min-2022-4900
Updated
2026-11-02
OSVCLSA-2024-1716485568 No score

php: Fix of 2 CVEs

  • CVE-2022-4900: sapi/cli/php_cli_server.c: Prevent potential buffer overflow for large value of php_cli_server_workers_max
  • CVE-2023-3247: ext/soap/php_http.c: Fix missing randomness check and insufficient random bytes
Record
CLSA-2024-1716485568
Updated
2026-11-02
OSVCLSA-2024-1716485695 No score

php: Fix of 2 CVEs

  • CVE-2022-4900: sapi/cli/php_cli_server.c: Prevent potential buffer overflow for large value of php_cli_server_workers_max
  • CVE-2023-3247: ext/soap/php_http.c: Fix missing randomness check and insufficient random bytes
Record
CLSA-2024-1716485695
Updated
2026-11-02
OSVSUSE-SU-2023:1583-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)
Record
SUSE-SU-2023:1583-1
Updated
2026-11-02
OSVSUSE-SU-2023:1846-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)
Record
SUSE-SU-2023:1846-1
Updated
2026-11-02
OSVSUSE-SU-2023:1847-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)
Record
SUSE-SU-2023:1847-1
Updated
2026-11-02
OSVUSN-6757-1 No score

php7.0, php7.2, php7.4, php8.1 vulnerabilities

It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-4900)

It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to cookie by pass. (CVE-2024-2756)

It was discovered that PHP incorrectly handled some passwords. An attacker could possibly use this issue to cause an account takeover attack. (CVE-2024-3096)

Record
USN-6757-1
Updated
2026-11-02
OSVUSN-6757-2 No score

php7.4, php8.1, php8.2 vulnerabilities

USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. This update fixes the problem.

Original advisory details:

It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-4900)

It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to cookie by pass. (CVE-2024-2756)

It was discovered that PHP incorrectly handled some passwords. An attacker could possibly use this issue to cause an account takeover attack. (CVE-2024-3096)

Record
USN-6757-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apcu-panel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 5.1.20-1.module_el8.6.0+2739+efabdb8f
5.1.20-1.module_el8.6.0+2739+efabdb8f
libzip
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+2739+efabdb8f
1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+3061+6878dd1b
1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+2739+efabdb8f
1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+3061+6878dd1b
1.7.3-1.module_el8.6.0+3061+6878dd1b
libzip-tools
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+2739+efabdb8f
1.7.3-1.module_el8.6.0+2739+efabdb8f
libzip-tools
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.7.3-1.module_el8.6.0+3061+6878dd1b
1.7.3-1.module_el8.6.0+3061+6878dd1b
php
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-bcmath
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-cli
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
Show 185 moreShow less
Affected packages
PackageAffectedFixed
php-common
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-dba
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-dbg
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-embedded
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-enchant
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-ffi
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-fpm
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-gd
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-gmp
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-intl
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-ldap
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-mbstring
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-mysqlnd
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-odbc
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-opcache
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-pdo
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-pear
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1:1.10.13-1.module_el8.6.0+2739+efabdb8f
1:1.10.13-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu
AlmaLinux:8
From an advisory covering 6 CVEs
 before 5.1.20-1.module_el8.6.0+2739+efabdb8f
5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu
AlmaLinux:8
From an advisory covering 6 CVEs
 before 5.1.20-1.module_el8.6.0+3061+6878dd1b
5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 5.1.20-1.module_el8.6.0+2739+efabdb8f
5.1.20-1.module_el8.6.0+2739+efabdb8f
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 5.1.20-1.module_el8.6.0+3061+6878dd1b
5.1.20-1.module_el8.6.0+3061+6878dd1b
php-pecl-rrd
AlmaLinux:8
From an advisory covering 6 CVEs
 before 2.0.3-1.module_el8.6.0+2739+efabdb8f
2.0.3-1.module_el8.6.0+2739+efabdb8f
php-pecl-rrd
AlmaLinux:8
From an advisory covering 6 CVEs
 before 2.0.3-1.module_el8.6.0+3061+6878dd1b
2.0.3-1.module_el8.6.0+3061+6878dd1b
php-pecl-xdebug3
AlmaLinux:8
From an advisory covering 6 CVEs
 before 3.1.2-1.module_el8.6.0+2739+efabdb8f
3.1.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-xdebug3
AlmaLinux:8
From an advisory covering 6 CVEs
 before 3.1.2-1.module_el8.6.0+3061+6878dd1b
3.1.2-1.module_el8.6.0+3061+6878dd1b
php-pecl-zip
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.19.2-1.module_el8.6.0+2739+efabdb8f
1.19.2-1.module_el8.6.0+2739+efabdb8f
php-pecl-zip
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.19.2-1.module_el8.6.0+3061+6878dd1b
1.19.2-1.module_el8.6.0+3061+6878dd1b
php-pgsql
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-process
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-snmp
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-soap
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
php-xml
AlmaLinux:8
From an advisory covering 6 CVEs
 before 8.0.27-1.module_el8.7.0+3401+dfb61c00
8.0.27-1.module_el8.7.0+3401+dfb61c00
libphp
Bitnami
 7.4.0 up to 8.0.22
8.0.22
php
Bitnami
 7.4.0 up to 8.0.22
8.0.22
php-min
Bitnami
 7.4.0 up to 8.0.22
8.0.22
php
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-bcmath
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-cli
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-common
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-dba
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-dbg
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-embedded
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-enchant
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-ffi
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-fpm
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-gd
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-gmp
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-intl
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-json
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-ldap
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-mbstring
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-mysqlnd
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-odbc
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-opcache
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-pdo
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-pgsql
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-process
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-snmp
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-soap
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-xml
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php-xmlrpc
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
7.4.6-4.module_el8.4.0+2172+b6ec2cd6.tuxcare.els10
php
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-bcmath
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-cli
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-common
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-dba
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-dbg
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-embedded
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-enchant
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-ffi
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-fpm
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-gd
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-gmp
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-intl
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-json
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-ldap
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-mbstring
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-mysqlnd
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-odbc
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-opcache
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-pdo
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-pgsql
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-process
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-snmp
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-soap
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-xml
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php-xmlrpc
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9
php7.4
Debian:11
 before 7.4.33-1+deb11u6, plus listed versions
7.4.21-1+deb11u17.4.25-1+deb11u17.4.26-17.4.28-1+deb11u17.4.30-1+deb11u1
Show 4 moreShow less
7.4.33-1+deb11u17.4.33-1+deb11u37.4.33-1+deb11u47.4.33-1+deb11u5
7.4.33-1+deb11u6
php7.4
Debian:11
From an advisory covering 5 CVEs
 before 7.4.33-1+deb11u6, plus listed versions
7.4.21-1+deb11u17.4.25-1+deb11u17.4.26-17.4.28-1+deb11u17.4.30-1+deb11u1
Show 4 moreShow less
7.4.33-1+deb11u17.4.33-1+deb11u37.4.33-1+deb11u47.4.33-1+deb11u5
7.4.33-1+deb11u6
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:5.1.20-1.module+el8.6.0+13671+84712317
0:5.1.20-1.module+el8.6.0+13671+84712317
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.7.3-1.module+el8.6.0+13671+84712317
0:1.7.3-1.module+el8.6.0+13671+84712317
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-ffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-ffi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 1:1.10.13-1.module+el8.6.0+13671+84712317
1:1.10.13-1.module+el8.6.0+13671+84712317
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:5.1.20-1.module+el8.6.0+13671+84712317
0:5.1.20-1.module+el8.6.0+13671+84712317
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:5.1.20-1.module+el8.6.0+13671+84712317
0:5.1.20-1.module+el8.6.0+13671+84712317
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:5.1.20-1.module+el8.6.0+13671+84712317
0:5.1.20-1.module+el8.6.0+13671+84712317
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:5.1.20-1.module+el8.6.0+13671+84712317
0:5.1.20-1.module+el8.6.0+13671+84712317
php-pecl-rrd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:2.0.3-1.module+el8.6.0+13671+84712317
0:2.0.3-1.module+el8.6.0+13671+84712317
php-pecl-rrd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:2.0.3-1.module+el8.6.0+13671+84712317
0:2.0.3-1.module+el8.6.0+13671+84712317
php-pecl-rrd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:2.0.3-1.module+el8.6.0+13671+84712317
0:2.0.3-1.module+el8.6.0+13671+84712317
php-pecl-xdebug3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:3.1.2-1.module+el8.6.0+13671+84712317
0:3.1.2-1.module+el8.6.0+13671+84712317
php-pecl-xdebug3-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:3.1.2-1.module+el8.6.0+13671+84712317
0:3.1.2-1.module+el8.6.0+13671+84712317
php-pecl-xdebug3-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:3.1.2-1.module+el8.6.0+13671+84712317
0:3.1.2-1.module+el8.6.0+13671+84712317
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.19.2-1.module+el8.6.0+13671+84712317
0:1.19.2-1.module+el8.6.0+13671+84712317
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.19.2-1.module+el8.6.0+13671+84712317
0:1.19.2-1.module+el8.6.0+13671+84712317
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:1.19.2-1.module+el8.6.0+13671+84712317
0:1.19.2-1.module+el8.6.0+13671+84712317
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-soap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-soap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-xml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php-xml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 6 CVEs
 before 0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
0:8.0.27-1.module+el8.7.0+17863+0ad92cd2
php7
openSUSE:Leap 15.4
 before 7.4.33-150200.3.54.1
7.4.33-150200.3.54.1
apache2-mod_php7
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-fastcgi
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-fpm
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-embed
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
apache2-mod_php7
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-embed
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-fastcgi
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-fpm
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.1
7.4.33-150400.4.22.1
php7-test
openSUSE:Leap 15.4
 before 7.4.33-150400.4.22.2
7.4.33-150400.4.22.2
php74
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 7.4.33-1.56.1
7.4.33-1.56.1
php74
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 7.4.33-1.56.1
7.4.33-1.56.1
php7.4
Ubuntu:20.04:LTS
 before 7.4.3-4ubuntu2.22, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 16 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.97.4.3-4ubuntu2.107.4.3-4ubuntu2.117.4.3-4ubuntu2.127.4.3-4ubuntu2.137.4.3-4ubuntu2.157.4.3-4ubuntu2.167.4.3-4ubuntu2.177.4.3-4ubuntu2.187.4.3-4ubuntu2.197.4.3-4ubuntu2.20
7.4.3-4ubuntu2.22
php8.1
Ubuntu:22.04:LTS
 before 8.1.2-1ubuntu2.17, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 12 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.15
8.1.2-1ubuntu2.17
php7.0
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 7.0.33-0ubuntu0.16.04.16+esm9, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 43 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.157.0.33-0ubuntu0.16.04.167.0.33-0ubuntu0.16.04.16+esm17.0.33-0ubuntu0.16.04.16+esm27.0.33-0ubuntu0.16.04.16+esm37.0.33-0ubuntu0.16.04.16+esm47.0.33-0ubuntu0.16.04.16+esm57.0.33-0ubuntu0.16.04.16+esm67.0.33-0ubuntu0.16.04.16+esm77.0.33-0ubuntu0.16.04.16+esm8
7.0.33-0ubuntu0.16.04.16+esm9
php7.2
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 7.2.24-0ubuntu0.18.04.17+esm3, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 25 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.67.2.24-0ubuntu0.18.04.77.2.24-0ubuntu0.18.04.87.2.24-0ubuntu0.18.04.97.2.24-0ubuntu0.18.04.107.2.24-0ubuntu0.18.04.117.2.24-0ubuntu0.18.04.127.2.24-0ubuntu0.18.04.137.2.24-0ubuntu0.18.04.157.2.24-0ubuntu0.18.04.167.2.24-0ubuntu0.18.04.177.2.24-0ubuntu0.18.04.17+esm17.2.24-0ubuntu0.18.04.17+esm2
7.2.24-0ubuntu0.18.04.17+esm3
php7.4
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 7.4.3-4ubuntu2.21, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 16 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.97.4.3-4ubuntu2.107.4.3-4ubuntu2.117.4.3-4ubuntu2.127.4.3-4ubuntu2.137.4.3-4ubuntu2.157.4.3-4ubuntu2.167.4.3-4ubuntu2.177.4.3-4ubuntu2.187.4.3-4ubuntu2.197.4.3-4ubuntu2.20
7.4.3-4ubuntu2.21
php8.1
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 8.1.2-1ubuntu2.16, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 12 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.15
8.1.2-1ubuntu2.16
php7.4
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 7.4.3-4ubuntu2.22, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 16 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.97.4.3-4ubuntu2.107.4.3-4ubuntu2.117.4.3-4ubuntu2.127.4.3-4ubuntu2.137.4.3-4ubuntu2.157.4.3-4ubuntu2.167.4.3-4ubuntu2.177.4.3-4ubuntu2.187.4.3-4ubuntu2.197.4.3-4ubuntu2.20
7.4.3-4ubuntu2.22
php8.1
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 8.1.2-1ubuntu2.17, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 12 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.15
8.1.2-1ubuntu2.17

History

History
RecordedChangedSources
affected
affected, aliases, facts, published, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4900 is a medium vulnerability (CVSS 6.2) in Php, published February 21, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in libphp 8.0.22.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open