In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-xmlUpgrade php-pgsqlUpgrade php-develUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-ldapUpgrade php-cliUpgrade php-pearUpgrade php-bcmathUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade phpUpgrade php-commonUpgrade php-mysqlndUpgrade php-snmpUpgrade php-dbgUpgrade apcu-panelUpgrade php-soapUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-dbaUpgrade php-embeddedUpgrade php-jsonUpgrade php-ffiUpgrade libzip-toolsUpgrade libzipUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-processUpgrade php-intlUpgrade php-gmp | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-ffiUpgrade php-intlUpgrade php-pgsqlUpgrade php-commonUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-ldapUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade apcu-panelUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-opcacheUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade php-processUpgrade libzipUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-enchantUpgrade php-pecl-rrd-debugsourceUpgrade php-develUpgrade php-pecl-rrd-debuginfoUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-embeddedUpgrade php-cliUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsource | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2021 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-commonUpgrade php-pdoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-fpmUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-cli | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-gdUpgrade php-ldapUpgrade php-pearUpgrade php-dbaUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-processUpgrade php-embeddedUpgrade php-gmpUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-fpmUpgrade phpUpgrade php-pecl-apcuUpgrade php-ffiUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-xmlUpgrade php-mbstringUpgrade php-opcacheUpgrade libzip-develUpgrade apcu-panelUpgrade php-odbcUpgrade php-intlUpgrade php-cliUpgrade php-snmpUpgrade php-commonUpgrade libzip-tools | Nov 17, 2021 | May 15, 2020 |
| Php | — | Upgrade to PHP version 7.2.34Upgrade to PHP version 7.4.11Upgrade to PHP version 7.3.23 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade php-intlUpgrade libzip-toolsUpgrade php-pecl-rrd-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-opcacheUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade apcu-panelUpgrade libzip-develUpgrade php-dbaUpgrade php-dba-debuginfoUpgrade php-cliUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ffiUpgrade php-snmpUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-cli-debuginfoUpgrade php-commonUpgrade php-odbcUpgrade php-intl-debuginfoUpgrade php-processUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-mbstring-debuginfoUpgrade php-gmp-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-enchantUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-pearUpgrade php-bcmathUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-soapUpgrade php-develUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-gdNo solution existsUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-ffi-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-json-debuginfo | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade libzip-debuginfoUpgrade php-soapUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-opcacheUpgrade php-intlUpgrade php-odbcUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade phpUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-gmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffi-debuginfoUpgrade php-pecl-apcuUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ffiUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade php-dbgUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-snmpUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade php-fpmUpgrade php-embedded-debuginfoUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-jsonUpgrade php-opcache-debuginfoUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-gdUpgrade libzip-develUpgrade php-processUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-develUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-cli | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php74-shmopUpgrade php74-jsonUpgrade php74-mysqlUpgrade php74-zipUpgrade php72-fpmUpgrade php7-zlibUpgrade php74-enchantUpgrade php7-opcacheUpgrade php74-readlineUpgrade php74-gdUpgrade php74-opcacheUpgrade php72-xmlwriterUpgrade php74-exifUpgrade php72-sysvmsgUpgrade php74-tokenizerUpgrade php72-ldapUpgrade php7-embedUpgrade php72Upgrade php7-ftpUpgrade php72-socketsUpgrade php74-sysvmsgUpgrade php7-sysvsemUpgrade php7-exifUpgrade php72-jsonUpgrade php7-ctypeUpgrade php72-posixUpgrade php74-socketsUpgrade php74-fastcgiUpgrade apache2-mod_php7Upgrade php7-intlUpgrade php7-posixUpgrade php7-mysqlUpgrade php72-mysqlUpgrade php7-pgsqlUpgrade php72-odbcUpgrade php72-shmopUpgrade php74-ftpUpgrade php72-fastcgiUpgrade php72-tokenizerUpgrade php72-sodiumUpgrade php74-xslUpgrade php7-xmlwriterUpgrade php74-bz2Upgrade php72-zlibUpgrade php7-pdoUpgrade php74-ctypeUpgrade php7-fpmUpgrade php74-pcntlUpgrade php7-socketsUpgrade php72-bz2Upgrade php7-gettextUpgrade php74-snmpUpgrade php7-testUpgrade php72-xmlreaderUpgrade php74-gettextUpgrade php72-readlineUpgrade php72-pspellUpgrade php72-xmlrpcUpgrade php74-xmlwriterUpgrade php74-iconvUpgrade php7-snmpUpgrade php74-fpmUpgrade php74-xmlrpcUpgrade php72-pgsqlUpgrade php74-sqliteUpgrade php72-imapUpgrade php74-develUpgrade php72-snmpUpgrade php7-pharUpgrade php74-sysvshmUpgrade php72-enchantUpgrade php7-fastcgiUpgrade php72-curlUpgrade php72-domUpgrade php7-iconvUpgrade php7-tokenizerUpgrade php7-soapUpgrade php7-bcmathUpgrade php72-opcacheUpgrade php7-sysvmsgUpgrade php74-pdoUpgrade php72-ctypeUpgrade php74-odbcUpgrade php72-gmpUpgrade php72-bcmathUpgrade php7-enchantUpgrade php7-wddxUpgrade php74-curlUpgrade php7-sqliteUpgrade php7-curlUpgrade php7-zipUpgrade php72-soapUpgrade php7-pearUpgrade php72-tidyUpgrade php7-xmlreaderUpgrade php74-sodiumUpgrade php72-zipUpgrade php72-sqliteUpgrade php72-pdoUpgrade php74-fileinfoUpgrade php74-domUpgrade php7-sysvshmUpgrade php72-pear-archive_tarUpgrade php72-ftpUpgrade php74-tidyUpgrade php7-odbcUpgrade apache2-mod_php74Upgrade php7-firebirdUpgrade php72-pharUpgrade php72-gettextUpgrade php74-calendarUpgrade php72-calendarUpgrade php74-intlUpgrade php72-pearUpgrade php72-iconvUpgrade php74-soapUpgrade php74-pgsqlUpgrade php72-exifUpgrade php74-mbstringUpgrade php74-posixUpgrade php72-wddxUpgrade php72-intlUpgrade php74Upgrade php74-zlibUpgrade php7-sodiumUpgrade php7-bz2Upgrade php72-dbaUpgrade php74-ldapUpgrade php7-pear-archive_tarUpgrade php7-opensslUpgrade php7-pcntlUpgrade php72-gdUpgrade php72-xslUpgrade php7-ldapUpgrade php72-opensslUpgrade php74-xmlreaderUpgrade php74-dbaUpgrade php72-sysvshmUpgrade php72-sysvsemUpgrade php7Upgrade php74-opensslUpgrade php7-shmopUpgrade php72-pcntlUpgrade php72-develUpgrade php7-gmpUpgrade php7-mbstringUpgrade php7-gdUpgrade php7-readlineUpgrade php74-gmpUpgrade php7-fileinfoUpgrade php7-calendarUpgrade php7-dbaUpgrade php72-mbstringUpgrade php74-bcmathUpgrade php72-fileinfoUpgrade php7-jsonUpgrade php74-sysvsemUpgrade apache2-mod_php72Upgrade php7-tidyUpgrade php7-develUpgrade php7-domUpgrade php7-xmlrpcUpgrade php74-pharUpgrade php7-xsl | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade libapache2-mod-php7.4Upgrade php7.4-cliUpgrade php7.4-cgiUpgrade php7.4-curlUpgrade php7.2-curlUpgrade php7.4-fpmUpgrade libapache2-mod-php7.2Upgrade php7.2-cgi | Mar 9, 2021 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub