Every CVE Search/ Get API key

CVE-2020-36193

Directory Traversal in Archive_Tar

7.5 HighIn KEVFix available

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

70.6%Up 68.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-22, CWE-59
Updated
2026-11-02
CVE List 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
EUVDEUVD-2021-0874 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
EUVD-2021-0874
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-rpw6-9xfx-jvcx 7.5

Directory Traversal in Archive_Tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

:exclamation: Note:

There was an initial fix for this vulnerability made in version 1.4.12. That fix introduced a bug which was fixed in 1.4.13. Therefore we have set the first-patched-version to 1.4.13 which the earliest working version that avoids this vulnerability.

Record
GHSA-rpw6-9xfx-jvcx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:H
Weakness
CWE-22, CWE-59
Updated
2026-11-02
CISA KEV No score

PEAR Archive_Tar Improper Link Resolution Vulnerability

PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.

Record
CVE-2020-36193
Weakness
CWE-22, CWE-59
Updated
2026-11-02
OSVALPINE-CVE-2020-36193 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
ALPINE-CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
Show 18 moreShow less
OSV 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-36193 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
DEBIAN-CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVGHSA-rpw6-9xfx-jvcx 7.5

Directory Traversal in Archive_Tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

:exclamation: Note:

There was an initial fix for this vulnerability made in version 1.4.12. That fix introduced a bug which was fixed in 1.4.13. Therefore we have set the first-patched-version to 1.4.13 which the earliest working version that avoids this vulnerability.

Record
GHSA-rpw6-9xfx-jvcx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:H
Weakness
CWE-22, CWE-59
Updated
2026-11-02
OSVRHSA-2022:6541 7.8

Red Hat Security Advisory: php:7.4 security update

Record
RHSA-2022:6541
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:6542 7.8

Red Hat Security Advisory: php:7.4 security update

Record
RHSA-2022:6542
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7340 7.8

Red Hat Security Advisory: php-pear security update

Record
RHSA-2022:7340
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:6542 7.8

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)

  • Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)

  • Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:6542
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-36193 7.5

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
UBUNTU-CVE-2020-36193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2022:6542 No score

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
  • Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
  • Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:6542
Updated
2026-11-02
OSVBIT-drupal-2020-36193 No score

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Record
BIT-drupal-2020-36193
Updated
2026-11-02
OSVMGASA-2021-0060 No score

Updated php-pear packages fix a security vulnerability

The updated php-pear packages fix a security vulnerability in component Archive_tar, a symlink out-of-path write vulnerability. Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links. (CVE-2020-36193).

Record
MGASA-2021-0060
Updated
2026-11-02
OSVopenSUSE-SU-2021:1267-1 No score

Security update for php7-pear

This update for php7-pear fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1267-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2872-1 No score

Security update for php7

This update for php7 fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
Record
openSUSE-SU-2021:2872-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3018-1 No score

Security update for php7-pear

This update for php7-pear fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
Record
openSUSE-SU-2021:3018-1
Updated
2026-11-02
OSVSUSE-SU-2021:2926-1 No score

Security update for php72

This update for php72 fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
Record
SUSE-SU-2021:2926-1
Updated
2026-11-02
OSVSUSE-SU-2021:3006-1 No score

Security update for php74-pear

This update for php74-pear fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
Record
SUSE-SU-2021:3006-1
Updated
2026-11-02
OSVSUSE-SU-2021:3018-1 No score

Security update for php7-pear

This update for php7-pear fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
Record
SUSE-SU-2021:3018-1
Updated
2026-11-02
OSVUSN-4723-1 No score

php-pear vulnerability

It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to execute arbitrary code.

Record
USN-4723-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pear/archive_tar
Packagist
 through 1.4.11
1.4.13
drupal7
Alpine:v3.12
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.13
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.14
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.15
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.16
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.17
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.18
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.19
 before 7.78-r0
7.78-r0
drupal7
Alpine:v3.20
 before 7.78-r0
7.78-r0
Show 255 moreShow less
Affected packages
PackageAffectedFixed
apcu-panel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
libzip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
libzip-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+3239+bedf0508
1.6.1-1.module_el8.6.0+3239+bedf0508
libzip-tools
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.6.1-1.module_el8.6.0+2750+78feabcb
1.6.1-1.module_el8.6.0+2750+78feabcb
php
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-bcmath
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-bcmath
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-cli
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-cli
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dba
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dba
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-dbg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-dbg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-embedded
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-embedded
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-enchant
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-enchant
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ffi
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-fpm
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-fpm
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-gd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-gd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-gmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-gmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-intl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-intl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-ldap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-ldap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-mbstring
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-mbstring
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-mysqlnd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-mysqlnd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-odbc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-odbc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-opcache
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-opcache
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pdo
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pdo
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-pear
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module_el8.6.0+3268+b150a051
1:1.10.13-1.module_el8.6.0+3268+b150a051
php-pecl-apcu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-apcu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+3239+bedf0508
5.1.18-1.module_el8.6.0+3239+bedf0508
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+3239+bedf0508
5.1.18-1.module_el8.6.0+3239+bedf0508
php-pecl-apcu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.18-1.module_el8.6.0+2750+78feabcb
5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.1-1.module_el8.6.0+2750+78feabcb
2.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-rrd
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.1-1.module_el8.6.0+3239+bedf0508
2.0.1-1.module_el8.6.0+3239+bedf0508
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.9.5-1.module_el8.6.0+3239+bedf0508
2.9.5-1.module_el8.6.0+3239+bedf0508
php-pecl-xdebug
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.9.5-1.module_el8.6.0+2750+78feabcb
2.9.5-1.module_el8.6.0+2750+78feabcb
php-pecl-zip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.18.2-1.module_el8.6.0+2750+78feabcb
1.18.2-1.module_el8.6.0+2750+78feabcb
php-pecl-zip
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.18.2-1.module_el8.6.0+3239+bedf0508
1.18.2-1.module_el8.6.0+3239+bedf0508
php-pgsql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-pgsql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-process
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-process
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-snmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-snmp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-soap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-soap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-xml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-xml
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
php-xmlrpc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3238+624bf8b8
7.4.19-4.module_el8.6.0+3238+624bf8b8
php-xmlrpc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 7.4.19-4.module_el8.6.0+3239+bedf0508
7.4.19-4.module_el8.6.0+3239+bedf0508
drupal
Bitnami
 7.0.0 up to 7.78.0, 8.9.0 up to 8.9.13, 9.0.0 up to 9.0.11, 9.1.0 up to 9.1.3
7.78.08.9.139.0.119.1.3
php-pear
Debian:12
 before 1:1.10.12+submodules+notgz+20210212-1
1:1.10.12+submodules+notgz+20210212-1
php-pear
Debian:13
 before 1:1.10.12+submodules+notgz+20210212-1
1:1.10.12+submodules+notgz+20210212-1
php-pear
Debian:14
 before 1:1.10.12+submodules+notgz+20210212-1
1:1.10.12+submodules+notgz+20210212-1
drupal7
Debian:9
 before 7.52-2+deb9u14, plus listed versions
7.52-27.52-2+deb9u17.52-2+deb9u107.52-2+deb9u117.52-2+deb9u12
Show 9 moreShow less
7.52-2+deb9u137.52-2+deb9u27.52-2+deb9u37.52-2+deb9u47.52-2+deb9u57.52-2+deb9u67.52-2+deb9u77.52-2+deb9u87.52-2+deb9u9
7.52-2+deb9u14
php-pear
Debian:9
 before 1:1.10.1+submodules+notgz-9+deb9u3, plus listed versions
1:1.10.1+submodules+notgz-91:1.10.1+submodules+notgz-9+deb9u11:1.10.1+submodules+notgz-9+deb9u2
1:1.10.1+submodules+notgz-9+deb9u3
php-pear
Debian:10
 before 1:1.10.6+submodules+notgz-1.1+deb10u2, plus listed versions
1:1.10.6+submodules+notgz-1.11:1.10.6+submodules+notgz-1.1+deb10u1
1:1.10.6+submodules+notgz-1.1+deb10u2
pear/archive_tar
Packagist
 before 1.4.13, plus listed versions
1.3.111.3.121.3.131.3.141.3.15
Show 14 moreShow less
1.3.161.4.01.4.11.4.101.4.111.4.121.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.9
1.4.13
php-pear
Mageia:7
 before 1.10.9-1.2.mga7
1.10.9-1.2.mga7
apcu-panel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
php
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-bcmath
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-bcmath-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-cli
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-cli-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-common
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-common-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dba
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dba-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dbg
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-dbg-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-embedded
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-embedded-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-enchant
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-enchant-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ffi
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ffi-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-fpm
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-fpm-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-gmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-intl
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-intl-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-json
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-json-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ldap
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-ldap-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mbstring
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mbstring-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mysqlnd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-mysqlnd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-odbc
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-odbc-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-opcache
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-opcache-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pdo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pdo-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pear
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.4.0+16578+ed65e99e
1:1.10.13-1.module+el8.4.0+16578+ed65e99e
php-pecl-apcu
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-pgsql-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-process
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-process-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-snmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-snmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-soap
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-soap-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xml
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xml-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xmlrpc
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
php-xmlrpc-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 3 CVEs
 before 0:7.4.6-5.module+el8.4.0+15727+276bb227
0:7.4.6-5.module+el8.4.0+15727+276bb227
apcu-panel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
libzip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
libzip-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.3.0+6678+b09f589e
0:1.6.1-1.module+el8.3.0+6678+b09f589e
php
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-bcmath
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-bcmath-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-cli
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-cli-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-common-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dbg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-dbg-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-embedded
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-embedded-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-enchant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-enchant-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ffi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-fpm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-fpm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-gmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-intl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-intl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-json
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-json-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mbstring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mbstring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mysqlnd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-mysqlnd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-odbc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-odbc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-opcache
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-opcache-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pdo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pdo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pear
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.6.0+16577+0788886f
1:1.10.13-1.module+el8.6.0+16577+0788886f
php-pecl-apcu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-apcu-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.3.0+6678+b09f589e
0:5.1.18-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-rrd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.3.0+6678+b09f589e
0:2.0.1-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-xdebug-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.3.0+6678+b09f589e
0:2.9.5-1.module+el8.3.0+6678+b09f589e
php-pecl-zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pecl-zip-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.3.0+6678+b09f589e
0:1.18.2-1.module+el8.3.0+6678+b09f589e
php-pgsql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pgsql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-process
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-process-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-soap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-soap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xmlrpc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-xmlrpc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+16316+906f6c6d
0:7.4.19-4.module+el8.6.0+16316+906f6c6d
php-pear
Red Hat:enterprise_linux:7::server
From an advisory covering 3 CVEs
 before 1:1.9.4-23.el7_9
1:1.9.4-23.el7_9
php-pear
Red Hat:enterprise_linux:7::workstation
From an advisory covering 3 CVEs
 before 1:1.9.4-23.el7_9
1:1.9.4-23.el7_9
libzip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.6.0+789+2130c178
0:1.6.1-1.module+el8.6.0+789+2130c178
libzip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.6.1-1.module+el8.4.0+415+e936cba3
0:1.6.1-1.module+el8.4.0+415+e936cba3
php
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:7.4.19-4.module+el8.6.0+1006+0d5a469f
0:7.4.19-4.module+el8.6.0+1006+0d5a469f
php-pear
Rocky Linux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.7.0+1067+0a7071cc
1:1.10.13-1.module+el8.7.0+1067+0a7071cc
php-pear
Rocky Linux:8
From an advisory covering 3 CVEs
 before 1:1.10.13-1.module+el8.6.0+1006+0d5a469f
1:1.10.13-1.module+el8.6.0+1006+0d5a469f
php-pecl-apcu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.6.0+789+2130c178
0:5.1.18-1.module+el8.6.0+789+2130c178
php-pecl-apcu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:5.1.18-1.module+el8.4.0+415+e936cba3
0:5.1.18-1.module+el8.4.0+415+e936cba3
php-pecl-rrd
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:2.9.5-1.module+el8.4.0+415+e936cba3
0:2.9.5-1.module+el8.4.0+415+e936cba3
php-pecl-zip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.6.0+789+2130c178
0:1.18.2-1.module+el8.6.0+789+2130c178
php-pecl-zip
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.18.2-1.module+el8.4.0+415+e936cba3
0:1.18.2-1.module+el8.4.0+415+e936cba3
php72
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 7.2.5-1.69.1
7.2.5-1.69.1
php72
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 7.2.5-1.69.1
7.2.5-1.69.1
php74-pear
SUSE:Linux Enterprise Module for Web and Scripting 12
 before 1.10.21-1.6.1
1.10.21-1.6.1
php7-pear
SUSE:Linux Enterprise Module for Web and Scripting 15 SP2
 before 1.10.21-3.6.1
1.10.21-3.6.1
php7-pear
SUSE:Linux Enterprise Module for Web and Scripting 15 SP3
 before 1.10.21-3.6.1
1.10.21-3.6.1
php-pear
Ubuntu:16.04:LTS
 before 1:1.10.1+submodules+notgz-6ubuntu0.3, plus listed versions
1:1.10.1+submodules+notgz-41:1.10.1+submodules+notgz-61:1.10.1+submodules+notgz-6ubuntu0.11:1.10.1+submodules+notgz-6ubuntu0.2
1:1.10.1+submodules+notgz-6ubuntu0.3
php-pear
Ubuntu:18.04:LTS
 before 1:1.10.5+submodules+notgz-1ubuntu1.18.04.3, plus listed versions
1:1.10.5+submodules+notgz-11:1.10.5+submodules+notgz-1ubuntu11:1.10.5+submodules+notgz-1ubuntu1.18.04.11:1.10.5+submodules+notgz-1ubuntu1.18.04.2
1:1.10.5+submodules+notgz-1ubuntu1.18.04.3
php-pear
Ubuntu:20.04:LTS
 before 1:1.10.9+submodules+notgz-1ubuntu0.20.04.2, plus listed versions
1:1.10.9+submodules+notgz-11:1.10.9+submodules+notgz-1ubuntu0.20.04.1
1:1.10.9+submodules+notgz-1ubuntu0.20.04.2
php7-pear
openSUSE:Leap 15.2
 before 1.10.21-lp152.2.6.1
1.10.21-lp152.2.6.1
php7
openSUSE:Leap 15.3
 before 7.2.5-4.82.1
7.2.5-4.82.1
php7-pear
openSUSE:Leap 15.3
 before 1.10.21-3.6.1
1.10.21-3.6.1

History

History
RecordedChangedSources
affected
exploitation
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-36193 is a high vulnerability (CVSS 7.5) in Debian Linux, published January 18, 2021. CISA lists it as known to be exploited, since August 25, 2022. EUVD reports exploitation since August 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 70.6%, the 99th percentile. Fixed in pear/archive_tar 1.4.13.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open