{"id":"CVE-2020-7065","aliases":["ALPINE-CVE-2020-7065","ALSA-2020:3662","BIT-libphp-2020-7065","BIT-php-2020-7065","BIT-php-min-2020-7065","DEBIAN-CVE-2020-7065","DSA-4719-1","EUVD-2020-28199","GHSA-hpqg-gp78-43q4","MGASA-2020-0148","RHSA-2020:3662","RHSA-2020:5275","RLSA-2020:3662","UBUNTU-CVE-2020-7065","USN-4330-1","USN-4330-2"],"status":"published","title":"mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.04869,"percentile":0.9211,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121","CWE-787"],"published":"2020-04-01T01:56:57Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"php7","fixed_in":["7.3.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"php7","fixed_in":["7.3.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"php7","fixed_in":["7.3.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"php7","fixed_in":["7.3.16-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"php7","fixed_in":["7.3.16-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"libphp","fixed_in":["7.3.16","7.4.4"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php","fixed_in":["7.3.16","7.4.4"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php-min","fixed_in":["7.3.16","7.4.4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"php7.4","fixed_in":["7.4.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","fixed_in":["7.4.3-4ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Bitnami","package":"libphp","ranges":[{"type":"SEMVER","events":[{"introduced":"7.3.0"},{"fixed":"7.3.16"},{"introduced":"7.4.0"},{"fixed":"7.4.4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php","ranges":[{"type":"SEMVER","events":[{"introduced":"7.3.0"},{"fixed":"7.3.16"},{"introduced":"7.4.0"},{"fixed":"7.4.4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php-min","ranges":[{"type":"SEMVER","events":[{"introduced":"7.3.0"},{"fixed":"7.3.16"},{"introduced":"7.4.0"},{"fixed":"7.4.4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.5-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"php7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-1~deb10u1"}]}],"versions":["7.3.10-1","7.3.11-1~deb10u1","7.3.12-1","7.3.14-1~deb10u1","7.3.15-1","7.3.15-2","7.3.15-3","7.3.4-2","7.3.6-1","7.3.8-1","7.3.9-1","7.3.9-1~deb10u1"],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.16-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu1.1"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.29+esm11"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.14"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-0ubuntu0.18.04.4"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.3-4ubuntu1.1"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1"],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"https://usn.ubuntu.com/4330-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4330-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4719","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200403-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://bugs.php.net/bug.php?id=79371","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://www.php.net/ChangeLog-7.php#7.4.4","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7065","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hpqg-gp78-43q4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-7065","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-3662.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-11039","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11041","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11045","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11047","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11048","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11050","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13224","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13225","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16163","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19203","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19204","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19246","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20454","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7059","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7060","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7062","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7063","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7064","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7065","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7066","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-7065","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0148.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26365","tags":["report"]},{"url":"https://www.php.net/ChangeLog-7.php#7.3.16","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3662","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3662.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11050","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11050","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16163","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19246","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7059","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7063","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7063","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7064","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79282","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7065","tags":["advisory","report"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_3","tags":["article"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7066","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79329","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5275","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5275.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:3662","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7065","tags":["report"]},{"url":"http://git.php.net/?p=php-src.git;a=commitdiff;h=69155120e68d2e614d5c300974a1a5610cfa2e8b;hp=e2b5f18896ca4169859c8ca058a9926aad6e3763","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4330-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4330-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-7066","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-7065","title":"mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T03:35:13.554Z","modified":"2024-09-17T04:25:45.769Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28199","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T03:35:13Z","modified":"2024-09-17T04:25:45Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:23.116921Z"}],"ghsa":[{"id":"GHSA-hpqg-gp78-43q4","title":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while using mb_strtolower() function...","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.34, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2022-05-24T17:13:12Z","modified":"2023-01-29T05:02:17Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:02.517815Z"}],"nvd":[{"id":"CVE-2020-7065","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T04:15:13.943Z","modified":"2026-06-17T03:24:17.803Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:05:56.580228Z"}],"osv":[{"id":"ALPINE-CVE-2020-7065","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T04:15:13.943Z","modified":"2026-11-03T06:32:26.346654801Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-7065","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T04:15:13.943Z","modified":"2026-10-24T10:31:02.147884566Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.34531Z"},{"id":"DEBIAN-CVE-2020-7065","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T04:15:13.943Z","modified":"2026-08-27T13:03:15.575989708Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2020:3662","title":"Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:36:11Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5275","title":"Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:43:43Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-02-04T20:15:13.875002Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-7065","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2020-04-01T04:15:00Z","modified":"2026-04-22T12:43:29.276198Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-10-29T11:00:19.53000927Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-libphp-2020-7065","title":"mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2025-08-11T13:53:07.698Z","modified":"2026-09-08T08:48:08.024730639Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-php-2020-7065","title":"mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2024-03-06T11:06:52.66Z","modified":"2026-09-08T08:48:18.117997844Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"BIT-php-min-2020-7065","title":"mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full","description":"In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.","status":"published","published":"2025-01-14T19:23:42.897Z","modified":"2026-09-08T08:48:24.666970154Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"DSA-4719-1","title":"php7.3 - security update","status":"published","published":"2020-07-06T00:00:00Z","modified":"2026-03-09T02:11:26.803101Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0148","title":"Updated php packages fix security vulnerability","description":"Critical bugs closed:\n- Use-of-uninitialized-value in exif [1]\n- mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full [2]\n- get_headers() silently truncates after a null byte [3]\n\nSome more bugs closed, as:\n- Memory corruption in preg_replace/preg_replace_callback and unicode\n- restore_error_handler does not restore previous errors mask\n","status":"published","published":"2020-04-01T01:56:57Z","modified":"2026-04-16T04:42:51.101680895Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"USN-4330-1","title":"php5, php7.0, php7.2, php7.3 vulnerabilities","description":"\nIt was discovered that PHP incorrectly handled certain file uploads.\nAn attacker could possibly use this issue to cause a crash.\n(CVE-2020-7062)\n\nIt was discovered that PHP incorrectly handled certain PHAR archive files.\nAn attacker could possibly use this issue to access sensitive information.\n(CVE-2020-7063)\n\nIt was discovered that PHP incorrectly handled certain EXIF files.\nAn attacker could possibly use this issue to access sensitive information\nor cause a crash. (CVE-2020-7064)\n\nIt was discovered that PHP incorrectly handled certain UTF strings.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 19.10. (CVE-2020-7065)\n\nIt was discovered that PHP incorrectly handled certain URLs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.\n(CVE-2020-7066)\n","status":"published","published":"2020-04-15T13:09:42Z","modified":"2026-04-22T10:03:47.538483Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4330-2","title":"php7.4 vulnerabilities","description":"USN-4330-1 fixed vulnerabilities in PHP. This update provides the corresponding\nupdate for Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled certain EXIF files.\n An attacker could possibly use this issue to access sensitive information\n or cause a crash. (CVE-2020-7064)\n\n It was discovered that PHP incorrectly handled certain UTF strings.\n An attacker could possibly use this issue to cause a crash or execute\n arbitrary code. (CVE-2020-7065)\n\n It was discovered that PHP incorrectly handled certain URLs.\n An attacker could possibly use this issue to expose sensitive information.\n (CVE-2020-7066)\n","status":"published","published":"2020-05-06T12:05:28Z","modified":"2026-04-22T10:03:56.416201Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}