Every CVE Search/ Get API key

CVE-2019-9020

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...

9.8 CriticalFix available

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

10.1%Up 7.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
CVE-2019-9020
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-125, CWE-416
Updated
2026-11-02
CVE List No score

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
CVE-2019-9020
Updated
2026-11-02
EUVDEUVD-2019-18407 No score

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
EUVD-2019-18407
Updated
2026-11-03
GitHub AdvisoriesGHSA-48fv-2rrr-rrph 9.8

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
GHSA-48fv-2rrr-rrph
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2019-9020 9.8

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
ALPINE-CVE-2019-9020
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 9.8

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
CVE-2019-9020
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVRHSA-2019:2519 8.1

Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update

Record
RHSA-2019:2519
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3299 8.1

Red Hat Security Advisory: rh-php72-php security update

Record
RHSA-2019:3299
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1624 7.5

Red Hat Security Advisory: php:7.2 security, bug fix, and enhancement update

Record
RHSA-2020:1624
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2020:1624 7.5

Moderate: php:7.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)

Security Fix(es):

  • php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

  • php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

  • php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

  • php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

  • php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

  • php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

  • php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

  • php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

  • php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

  • php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

Record
RLSA-2020:1624
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-9020 9.8

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Record
UBUNTU-CVE-2019-9020
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2020:1624 No score

Moderate: php:7.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)

Security Fix(es):

  • php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

  • php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

  • php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

  • php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

  • php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

  • php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

  • php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

  • php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

  • php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

  • php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:1624
Updated
2026-11-02
OSVCLSA-2026-1776879963 No score

php: Fix of 9 CVEs

  • CVE-2019-9020: fix heap out-of-bounds read in xmlrpc_decode()
  • CVE-2019-9021: fix heap buffer overflow in phar_detect_phar_fname_ext
  • CVE-2019-9023: fix heap buffer over-reads in mbstring regex functions
  • CVE-2019-9641: fix uninitialized read in exif_process_IFD_in_TIFF
  • CVE-2019-11034: fix heap-buffer-overflow in exif_process_IFD_in_MAKERNOTE
  • CVE-2019-11035: fix heap-buffer-overflow in exif_iif_add_value
  • CVE-2019-11036: fix heap-buffer-overflow in exif_process_IFD_TAG
  • CVE-2019-11040: fix heap-buffer-overflow on php_jpg_get16
  • CVE-2019-13224: do not allow different encodings for onig_new_deluxe()
Record
CLSA-2026-1776879963
Updated
2026-11-02
OSVopenSUSE-SU-2019:1572-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1572-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1573-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1573-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11167-1 No score

php7-7.4.24-1.1 on GA media

These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11167-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02
OSVSUSE-RU-2019:0823-1 No score

Optional update for php72

This update provides PHP 7.2 and subpackages to the SUSE Linux Enterprise 12 Web and Scripting Module.

It is a replacement of the php7 packages, the packages do not co-exist.

The mcrypt extensions was removed in PHP 7.2.

Record
SUSE-RU-2019:0823-1
Updated
2026-11-02
OSVSUSE-SU-2019:0985-1 No score

Security update for php5

This update for php5 fixes the following issues:

Security issues fixed:

  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
Record
SUSE-SU-2019:0985-1
Updated
2026-11-02
OSVSUSE-SU-2019:14013-1 No score

Security update for php53

This update for php53 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
Record
SUSE-SU-2019:14013-1
Updated
2026-11-02
OSVSUSE-SU-2019:1461-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).
Record
SUSE-SU-2019:1461-1
Updated
2026-11-02
OSVSUSE-SU-2022:4067-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • Version update to 7.2.34 [jsc#SLE-23639]

  • CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).

  • Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).

Record
SUSE-SU-2022:4067-1
Updated
2026-11-02
OSVUSN-3902-1 No score

php5, php7.0 vulnerabilities

It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9020, CVE-2019-9024)

It was discovered that the PHP PHAR module incorrectly handled certain filenames. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9021)

It was discovered that PHP incorrectly parsed certain DNS responses. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-9022)

It was discovered that PHP incorrectly handled mbstring regular expressions. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9023)

Record
USN-3902-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php7
Alpine:v3.10
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.11
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.12
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.13
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.14
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.15
 before 7.2.14-r0
7.2.14-r0
php7
Alpine:v3.8
 before 7.2.17-r0
7.2.17-r0
php7
Alpine:v3.9
 before 7.2.14-r0
7.2.14-r0
apcu-panel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
Show 290 moreShow less
Affected packages
PackageAffectedFixed
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-pear
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module_el8.3.0+2010+7c76a223
1:1.10.5-9.module_el8.3.0+2010+7c76a223
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.5.0+53+9945c2af
5.1.12-2.module_el8.5.0+53+9945c2af
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.4.0+2228+7c76a223
5.1.12-2.module_el8.4.0+2228+7c76a223
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.5.0+53+9945c2af
5.1.12-2.module_el8.5.0+53+9945c2af
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.4.0+2228+7c76a223
5.1.12-2.module_el8.4.0+2228+7c76a223
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.5.0+53+9945c2af
1.15.3-1.module_el8.5.0+53+9945c2af
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.4.0+2228+7c76a223
1.15.3-1.module_el8.4.0+2228+7c76a223
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.3.0+2010+7c76a223
1.15.3-1.module_el8.3.0+2010+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-bcmath
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-cli
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-common
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-dba
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-devel
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-embedded
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-enchant
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-fpm
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-gd
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-imap
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-intl
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-ldap
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-mbstring
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-mysql
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-odbc
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-pdo
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-pgsql
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-process
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-pspell
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-recode
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-snmp
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-soap
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-tidy
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-xml
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-xmlrpc
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php-zts
TuxCare:OracleLinux:6
From an advisory covering 9 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els19
5.3.3-50.el6_10.tuxcare.ol.els19
php5
Debian:8
From an advisory covering 5 CVEs
 before 5.6.40+dfsg-0+deb8u1, plus listed versions
5.6.11+dfsg-15.6.12+dfsg-0+deb8u15.6.12+dfsg-15.6.13+dfsg-0+deb8u15.6.13+dfsg-1
Show 41 moreShow less
5.6.13+dfsg-25.6.14+dfsg-0+deb8u15.6.14+dfsg-15.6.15+dfsg-15.6.16+dfsg-15.6.16+dfsg-25.6.16+dfsg-35.6.16+dfsg-45.6.17+dfsg-0+deb8u15.6.17+dfsg-15.6.17+dfsg-35.6.18+dfsg-15.6.19+dfsg-0+deb8u15.6.19+dfsg-15.6.19+dfsg-25.6.20+dfsg-0+deb8u15.6.20+dfsg-15.6.21+dfsg-15.6.21+dfsg-25.6.22+dfsg-0+deb8u15.6.22+dfsg-15.6.22+dfsg-25.6.23+dfsg-0+deb8u15.6.23+dfsg-15.6.24+dfsg-0+deb8u15.6.24+dfsg-15.6.26+dfsg-0+deb8u15.6.26+dfsg-15.6.27+dfsg-0+deb8u15.6.28+dfsg-0+deb8u15.6.29+dfsg-0+deb8u15.6.30+dfsg-0+deb8u15.6.33+dfsg-0+deb8u15.6.36+dfsg-0+deb8u15.6.37+dfsg-0+deb8u15.6.38+dfsg-0+deb8u15.6.39+dfsg-0+deb8u15.6.39+dfsg-0+deb8u25.6.7+dfsg-15.6.9+dfsg-0+deb8u15.6.9+dfsg-1
5.6.40+dfsg-0+deb8u1
php7.0
Debian:9
From an advisory covering 5 CVEs
 before 7.0.33-0+deb9u2, plus listed versions
7.0.19-17.0.20-17.0.20-27.0.22-17.0.22-2
Show 13 moreShow less
7.0.22-37.0.25-17.0.26-17.0.27-0+deb9u17.0.27-17.0.28-17.0.29-17.0.30-0+deb9u17.0.30-17.0.30-27.0.31-17.0.32-17.0.33-0+deb9u1
7.0.33-0+deb9u2
rh-php71-php
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-bcmath
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-cli
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dba
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dbg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-embedded
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-enchant
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-fpm
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-intl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mbstring
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-odbc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-opcache
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pdo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pgsql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-process
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pspell
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-recode
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-snmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-soap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xml
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-zip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php72-php
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-bcmath
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-cli
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-dba
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-dbg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-embedded
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-enchant
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-fpm
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-gd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-gmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-intl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-mbstring
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-odbc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-opcache
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pdo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pgsql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-process
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pspell
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-recode
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-snmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-soap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-xml
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-zip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module+el8.1.0+3202+af5476b9
1:1.10.5-9.module+el8.1.0+3202+af5476b9
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
libzip
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.4.0+413+c9202dda
0:1.5.1-2.module+el8.4.0+413+c9202dda
php
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.4.0+413+c9202dda
0:7.2.24-1.module+el8.4.0+413+c9202dda
php-pear
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module+el8.4.0+413+c9202dda
1:1.10.5-9.module+el8.4.0+413+c9202dda
php-pecl-apcu
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.4.0+413+c9202dda
0:5.1.12-2.module+el8.4.0+413+c9202dda
php-pecl-zip
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.4.0+413+c9202dda
0:1.15.3-1.module+el8.4.0+413+c9202dda
libmemcached
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
php72
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 7 CVEs
 before 7.2.5-1.7.1
7.2.5-1.7.1
php72-memcached
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 7 CVEs
 before 3.1.3-1.3.1
3.1.3-1.3.1
tidy
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 7 CVEs
 before 1.0.20100204cvs-26.2.1
1.0.20100204cvs-26.2.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 7 CVEs
 before 7.2.5-1.7.1
7.2.5-1.7.1
tidy
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 7 CVEs
 before 1.0.20100204cvs-26.2.1
1.0.20100204cvs-26.2.1
libmemcached
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 7 CVEs
 before 7.2.5-1.7.1
7.2.5-1.7.1
tidy
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 7 CVEs
 before 1.0.20100204cvs-26.2.1
1.0.20100204cvs-26.2.1
libmemcached
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
libmemcached
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
libmemcached
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
libmemcached
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 7 CVEs
 before 1.0.18-3.2.1
1.0.18-3.2.1
php5
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 6 CVEs
 before 5.5.14-109.51.6
5.5.14-109.51.6
php5
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 6 CVEs
 before 5.5.14-109.51.6
5.5.14-109.51.6
php5
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 6 CVEs
 before 5.5.14-109.51.6
5.5.14-109.51.6
php53
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php7
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 16 CVEs
 before 7.2.5-4.32.1
7.2.5-4.32.1
php7
SUSE:Linux Enterprise Module for Web and Scripting 15
From an advisory covering 16 CVEs
 before 7.2.5-4.32.1
7.2.5-4.32.1
php7
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Enterprise Storage 6
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
openSUSE:Leap 15.4
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php5
Ubuntu:14.04:LTS
 before 5.5.9+dfsg-1ubuntu4.27, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 26 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.26
5.5.9+dfsg-1ubuntu4.27
php7.0
Ubuntu:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.2, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 23 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.1
7.0.33-0ubuntu0.16.04.2
php7.2
Ubuntu:18.04:LTS
 before 7.2.15-0ubuntu0.18.04.1, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.1
7.2.15-0ubuntu0.18.04.1
php5
Ubuntu:14.04:LTS
From an advisory covering 5 CVEs
 before 5.5.9+dfsg-1ubuntu4.27, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 26 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.26
5.5.9+dfsg-1ubuntu4.27
php7.0
Ubuntu:16.04:LTS
From an advisory covering 5 CVEs
 before 7.0.33-0ubuntu0.16.04.2, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 23 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.1
7.0.33-0ubuntu0.16.04.2
php7
openSUSE:Leap 15.1
From an advisory covering 16 CVEs
 before 7.2.5-lp151.6.3.1
7.2.5-lp151.6.3.1
php7
openSUSE:Leap 15.0
From an advisory covering 16 CVEs
 before 7.2.5-lp150.2.19.1
7.2.5-lp150.2.19.1
php7
openSUSE:Tumbleweed
From an advisory covering 44 CVEs
 before 7.4.24-1.1
7.4.24-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
 before 8.0.11-1.1
8.0.11-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-9020 is a critical vulnerability (CVSS 9.8) in Php, published February 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. Fixed in php7 7.2.14-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 14 package rows and 143 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open