Every CVE Search/ Get API key

CVE-2019-9637

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...

7.5 HighFix available

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

7.35%Up 4.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
CVE-2019-9637
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
CVE-2019-9637
Updated
2026-11-02
EUVDEUVD-2019-19006 No score

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
EUVD-2019-19006
Updated
2026-11-03
GitHub AdvisoriesGHSA-hq76-774r-jcwj 7.5

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
GHSA-hq76-774r-jcwj
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2019-9637 7.5

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
ALPINE-CVE-2019-9637
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSV 7.5

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
CVE-2019-9637
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 18 moreShow less
OSVRHSA-2019:2519 8.1

Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update

Record
RHSA-2019:2519
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3299 8.1

Red Hat Security Advisory: rh-php72-php security update

Record
RHSA-2019:3299
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1624 7.5

Red Hat Security Advisory: php:7.2 security, bug fix, and enhancement update

Record
RHSA-2020:1624
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2020:1624 7.5

Moderate: php:7.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)

Security Fix(es):

  • php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

  • php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

  • php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

  • php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

  • php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

  • php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

  • php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

  • php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

  • php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

  • php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

Record
RLSA-2020:1624
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-9637 7.5

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Record
UBUNTU-CVE-2019-9637
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2020:1624 No score

Moderate: php:7.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.2.24). (BZ#1726981)

Security Fix(es):

  • php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

  • php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

  • php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

  • php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

  • php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  • php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  • php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

  • php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

  • php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

  • php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

  • php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

  • php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

  • php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

  • php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

  • php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  • php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:1624
Updated
2026-11-02
OSVCLSA-2026-1777946242 No score

php: Fix of 13 CVEs

  • CVE-2018-14883: fix int overflow leading to heap overflow in exif_thumbnail_extract
  • CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD
  • CVE-2019-9022: fix memcpy with negative length via crafted DNS response
  • CVE-2019-9640: fix invalid read in exif_process_SOFn
  • CVE-2019-11042: fix heap buffer overflow in exif_process_user_comment
  • CVE-2019-9638, CVE-2019-9639: fix uninitialized read in exif_process_IFD_in_MAKERNOTE (single upstream commit covers both)
  • CVE-2019-9637: safer rename() procedure to avoid permission leak on EXDEV cross-filesystem fallback
  • CVE-2019-19246: fix Oniguruma out-of-bounds read in str_lower_case_match
  • CVE-2019-9024: fix xmlrpc base64 out-of-bounds read via unsigned char cast
  • CVE-2018-20783: fix phar_parse_pharfile buffer over-read via stricter manifest bounds checks
  • CVE-2018-19518: disable rsh/ssh logins in imap_open by default (new no_rsh/no_ssh INI entries)
  • CVE-2018-19935: fix imap_mail NULL pointer dereference on empty message parameter
Record
CLSA-2026-1777946242
Updated
2026-11-02
OSVopenSUSE-SU-2019:1572-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1572-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1573-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1573-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11167-1 No score

php7-7.4.24-1.1 on GA media

These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11167-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02
OSVSUSE-SU-2019:0988-1 No score

Security update for php72

This update for php72 fixes the following issues:

  • CVE-2019-9637: Due to the way rename() across filesystems is implemented, it was possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. (bsc#1128892)
  • CVE-2019-9675: phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: 'This issue allows theoretical compromise of security, but a practical attack is usually impossible.' (bsc#1128886)
  • CVE-2019-9638: An issue was discovered in the EXIF component in PHP. There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. (bsc#1128889)
  • CVE-2019-9639: An issue was discovered in the EXIF component in PHP. There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. (bsc#1128887)
  • CVE-2019-9640: An issue was discovered in the EXIF component in PHP. There was an Invalid Read in exif_process_SOFn. (bsc#1128883)
Record
SUSE-SU-2019:0988-1
Updated
2026-11-02
OSVSUSE-SU-2019:1325-1 No score

Security update for php5

This update for php5 fixes the following issues:

Security issues fixed:

  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-9637: Fixed a potential information disclosure in rename() (bsc#1128892).
  • CVE-2019-9675: Fixed a potential buffer overflow in phar_tar_writeheaders_int() (bsc#1128886).
  • CVE-2019-9638: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to value_len (bsc#1128889).
  • CVE-2019-9639: Fixed an uninitialized read in exif_process_IFD_in_MAKERNOTE() related to data_len (bsc#1128887).
  • CVE-2019-9640: Fixed an invalid Read in exif_process_SOFn() (bsc#1128883).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).
Record
SUSE-SU-2019:1325-1
Updated
2026-11-02
OSVSUSE-SU-2019:14013-1 No score

Security update for php53

This update for php53 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
Record
SUSE-SU-2019:14013-1
Updated
2026-11-02
OSVSUSE-SU-2019:1461-1 No score

Security update for php7

This update for php7 fixes the following issues:

Security issues fixed:

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).
  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).
  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).
  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).
  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).
  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).
  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).
  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).
  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).
  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).
  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).
  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).
  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).
  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).
  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).
  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed:

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).
  • Enabled php7 testsuite (bsc#1119396).
Record
SUSE-SU-2019:1461-1
Updated
2026-11-02
OSVSUSE-SU-2022:4067-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • Version update to 7.2.34 [jsc#SLE-23639]

  • CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).

  • Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).

Record
SUSE-SU-2022:4067-1
Updated
2026-11-02
OSVUSN-3922-1 No score

php7.0, php7.2 vulnerabilities

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)

Record
USN-3922-1
Updated
2026-11-02
OSVUSN-3922-2 No score

php5 vulnerabilities

USN-3922-1 fixed vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 14.04 LTS.

It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. (CVE-2019-9022)

It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-9675)

Original advisory details:

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)

Record
USN-3922-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php7
Alpine:v3.10
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.11
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.12
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.13
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.14
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.15
 before 7.2.16-r0
7.2.16-r0
php7
Alpine:v3.7
 before 7.1.29-r0
7.1.29-r0
php7
Alpine:v3.8
 before 7.2.17-r0
7.2.17-r0
php7
Alpine:v3.9
 before 7.2.17-r0
7.2.17-r0
apcu-panel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
Show 290 moreShow less
Affected packages
PackageAffectedFixed
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
libzip-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.4.0+2228+7c76a223
1.5.1-2.module_el8.4.0+2228+7c76a223
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.3.0+2010+7c76a223
1.5.1-2.module_el8.3.0+2010+7c76a223
libzip-tools
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.5.1-2.module_el8.5.0+53+9945c2af
1.5.1-2.module_el8.5.0+53+9945c2af
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-bcmath
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-cli
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-common
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-dba
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-dbg
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-embedded
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-enchant
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-fpm
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-gd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-gmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-intl
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-json
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-ldap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-mbstring
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-mysqlnd
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-odbc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-opcache
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pdo
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-pear
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module_el8.3.0+2010+7c76a223
1:1.10.5-9.module_el8.3.0+2010+7c76a223
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.5.0+53+9945c2af
5.1.12-2.module_el8.5.0+53+9945c2af
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.4.0+2228+7c76a223
5.1.12-2.module_el8.4.0+2228+7c76a223
php-pecl-apcu
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.5.0+53+9945c2af
5.1.12-2.module_el8.5.0+53+9945c2af
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.3.0+2010+7c76a223
5.1.12-2.module_el8.3.0+2010+7c76a223
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 17 CVEs
 before 5.1.12-2.module_el8.4.0+2228+7c76a223
5.1.12-2.module_el8.4.0+2228+7c76a223
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.5.0+53+9945c2af
1.15.3-1.module_el8.5.0+53+9945c2af
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.4.0+2228+7c76a223
1.15.3-1.module_el8.4.0+2228+7c76a223
php-pecl-zip
AlmaLinux:8
From an advisory covering 17 CVEs
 before 1.15.3-1.module_el8.3.0+2010+7c76a223
1.15.3-1.module_el8.3.0+2010+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-pgsql
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-process
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-recode
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-snmp
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-soap
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xml
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.5.0+53+9945c2af
7.2.24-1.module_el8.5.0+53+9945c2af
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.3.0+2010+7c76a223
7.2.24-1.module_el8.3.0+2010+7c76a223
php-xmlrpc
AlmaLinux:8
From an advisory covering 17 CVEs
 before 7.2.24-1.module_el8.4.0+2228+7c76a223
7.2.24-1.module_el8.4.0+2228+7c76a223
php
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-bcmath
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-cli
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-common
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-dba
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-devel
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-embedded
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-enchant
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-fpm
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-gd
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-imap
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-intl
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-ldap
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-mbstring
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-mysql
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-odbc
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-pdo
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-pgsql
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-process
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-pspell
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-recode
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-snmp
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-soap
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-tidy
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-xml
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-xmlrpc
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php-zts
TuxCare:OracleLinux:6
From an advisory covering 13 CVEs
 before 5.3.3-50.el6_10.tuxcare.ol.els20
5.3.3-50.el6_10.tuxcare.ol.els20
php5
Debian:8
From an advisory covering 6 CVEs
 before 5.6.40+dfsg-0+deb8u2, plus listed versions
5.6.11+dfsg-15.6.12+dfsg-0+deb8u15.6.12+dfsg-15.6.13+dfsg-0+deb8u15.6.13+dfsg-1
Show 42 moreShow less
5.6.13+dfsg-25.6.14+dfsg-0+deb8u15.6.14+dfsg-15.6.15+dfsg-15.6.16+dfsg-15.6.16+dfsg-25.6.16+dfsg-35.6.16+dfsg-45.6.17+dfsg-0+deb8u15.6.17+dfsg-15.6.17+dfsg-35.6.18+dfsg-15.6.19+dfsg-0+deb8u15.6.19+dfsg-15.6.19+dfsg-25.6.20+dfsg-0+deb8u15.6.20+dfsg-15.6.21+dfsg-15.6.21+dfsg-25.6.22+dfsg-0+deb8u15.6.22+dfsg-15.6.22+dfsg-25.6.23+dfsg-0+deb8u15.6.23+dfsg-15.6.24+dfsg-0+deb8u15.6.24+dfsg-15.6.26+dfsg-0+deb8u15.6.26+dfsg-15.6.27+dfsg-0+deb8u15.6.28+dfsg-0+deb8u15.6.29+dfsg-0+deb8u15.6.30+dfsg-0+deb8u15.6.33+dfsg-0+deb8u15.6.36+dfsg-0+deb8u15.6.37+dfsg-0+deb8u15.6.38+dfsg-0+deb8u15.6.39+dfsg-0+deb8u15.6.39+dfsg-0+deb8u25.6.40+dfsg-0+deb8u15.6.7+dfsg-15.6.9+dfsg-0+deb8u15.6.9+dfsg-1
5.6.40+dfsg-0+deb8u2
php7.0
Debian:9
From an advisory covering 6 CVEs
 before 7.0.33-0+deb9u3, plus listed versions
7.0.19-17.0.20-17.0.20-27.0.22-17.0.22-2
Show 14 moreShow less
7.0.22-37.0.25-17.0.26-17.0.27-0+deb9u17.0.27-17.0.28-17.0.29-17.0.30-0+deb9u17.0.30-17.0.30-27.0.31-17.0.32-17.0.33-0+deb9u17.0.33-0+deb9u2
7.0.33-0+deb9u3
rh-php71-php
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-bcmath
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-cli
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dba
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-dbg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-embedded
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-enchant
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-fpm
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-gmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-intl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mbstring
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-odbc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-opcache
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pdo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pgsql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-process
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-pspell
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-recode
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-snmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-soap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xml
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php71-php-zip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 33 CVEs
 before 0:7.1.30-1.el7
0:7.1.30-1.el7
rh-php72-php
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-bcmath
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-cli
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-common
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-dba
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-dbg
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-embedded
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-enchant
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-fpm
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-gd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-gmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-intl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-json
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-mbstring
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-mysqlnd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-odbc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-opcache
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pdo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pgsql
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-process
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-pspell
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-recode
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-snmp
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-soap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-xml
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-xmlrpc
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
rh-php72-php-zip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 21 CVEs
 before 0:7.2.24-1.el7
0:7.2.24-1.el7
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.1.0+3202+af5476b9
0:1.5.1-2.module+el8.1.0+3202+af5476b9
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module+el8.1.0+3202+af5476b9
1:1.10.5-9.module+el8.1.0+3202+af5476b9
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.1.0+3202+af5476b9
0:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.1.0+3186+20164e6f
0:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-recode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-recode-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.2.0+4601+7c76a223
0:7.2.24-1.module+el8.2.0+4601+7c76a223
libzip
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.5.1-2.module+el8.4.0+413+c9202dda
0:1.5.1-2.module+el8.4.0+413+c9202dda
php
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:7.2.24-1.module+el8.4.0+413+c9202dda
0:7.2.24-1.module+el8.4.0+413+c9202dda
php-pear
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:1.10.5-9.module+el8.4.0+413+c9202dda
1:1.10.5-9.module+el8.4.0+413+c9202dda
php-pecl-apcu
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:5.1.12-2.module+el8.4.0+413+c9202dda
0:5.1.12-2.module+el8.4.0+413+c9202dda
php-pecl-zip
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.15.3-1.module+el8.4.0+413+c9202dda
0:1.15.3-1.module+el8.4.0+413+c9202dda
php72
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 5 CVEs
 before 7.2.5-1.10.1
7.2.5-1.10.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 5 CVEs
 before 7.2.5-1.10.1
7.2.5-1.10.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 5 CVEs
 before 7.2.5-1.10.1
7.2.5-1.10.1
php5
SUSE:Linux Enterprise Module for Web and Scripting 12
From an advisory covering 8 CVEs
 before 5.5.14-109.58.1
5.5.14-109.58.1
php5
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 8 CVEs
 before 5.5.14-109.58.1
5.5.14-109.58.1
php5
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 8 CVEs
 before 5.5.14-109.58.1
5.5.14-109.58.1
php53
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php53
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 11 CVEs
 before 5.3.17-112.58.1
5.3.17-112.58.1
php7
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 16 CVEs
 before 7.2.5-4.32.1
7.2.5-4.32.1
php7
SUSE:Linux Enterprise Module for Web and Scripting 15
From an advisory covering 16 CVEs
 before 7.2.5-4.32.1
7.2.5-4.32.1
php7
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
SUSE:Enterprise Storage 6
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php7
openSUSE:Leap 15.4
From an advisory covering 52 CVEs
 before 7.2.34-150000.4.103.1
7.2.34-150000.4.103.1
php5
Ubuntu:14.04:LTS
 before 5.5.9+dfsg-1ubuntu4.29, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 27 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.27
5.5.9+dfsg-1ubuntu4.29
php7.0
Ubuntu:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.3, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 24 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.2
7.0.33-0ubuntu0.16.04.3
php7.2
Ubuntu:18.04:LTS
 before 7.2.15-0ubuntu0.18.04.2, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 4 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.1
7.2.15-0ubuntu0.18.04.2
php7.0
Ubuntu:16.04:LTS
From an advisory covering 5 CVEs
 before 7.0.33-0ubuntu0.16.04.3, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 24 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.2
7.0.33-0ubuntu0.16.04.3
php7.2
Ubuntu:18.04:LTS
From an advisory covering 5 CVEs
 before 7.2.15-0ubuntu0.18.04.2, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 4 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.1
7.2.15-0ubuntu0.18.04.2
php5
Ubuntu:14.04:LTS
From an advisory covering 7 CVEs
 before 5.5.9+dfsg-1ubuntu4.29, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 27 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.27
5.5.9+dfsg-1ubuntu4.29
php7
openSUSE:Leap 15.1
From an advisory covering 16 CVEs
 before 7.2.5-lp151.6.3.1
7.2.5-lp151.6.3.1
php7
openSUSE:Leap 15.0
From an advisory covering 16 CVEs
 before 7.2.5-lp150.2.19.1
7.2.5-lp150.2.19.1
php7
openSUSE:Tumbleweed
From an advisory covering 44 CVEs
 before 7.4.24-1.1
7.4.24-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
 before 8.0.11-1.1
8.0.11-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-9637 is a high vulnerability (CVSS 7.5) in Php, published March 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.35%, the 94th percentile. Fixed in php7 7.2.16-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 package rows and 147 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open