In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcuUpgrade php-snmpUpgrade php-fpmUpgrade php-pdoUpgrade phpUpgrade php-xmlUpgrade libzip-develUpgrade php-opcacheUpgrade php-develUpgrade php-cliUpgrade php-pgsqlUpgrade php-pearUpgrade php-odbcUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-commonUpgrade php-mbstringUpgrade php-embeddedUpgrade php-intlUpgrade php-gdUpgrade php-pecl-rrdUpgrade libzipUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-processUpgrade apcu-panelUpgrade php-enchantUpgrade php-soapUpgrade php-dbaUpgrade libzip-toolsUpgrade php-jsonUpgrade php-ffiUpgrade php-xmlrpc | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-gd-debuginfoUpgrade php-pearUpgrade php-xmlUpgrade php-embedded-debuginfoUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebugUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-opcacheUpgrade php-gdUpgrade php-enchantUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-mysqlndUpgrade php-processUpgrade php-fpmUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-develUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-soapUpgrade phpUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-dbgUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade php-ldapUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-ffi-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade libzip-tools-debuginfoUpgrade apcu-panelUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfo | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2021 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-fpmUpgrade php-gdUpgrade php-xmlrpcUpgrade php-soapUpgrade php-processUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade php-odbcUpgrade phpUpgrade php-pdoUpgrade php-common | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade php-pearUpgrade php-gdUpgrade php-enchantUpgrade php-ldapUpgrade php-soapUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-dbaUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-gmpUpgrade php-develUpgrade php-pecl-zipUpgrade phpUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-processUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-commonUpgrade php-ffiUpgrade libzip-develUpgrade php-cliUpgrade php-opcacheUpgrade php-intlUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-odbcUpgrade apcu-panelUpgrade php-xmlUpgrade php-mbstring | Nov 17, 2021 | May 15, 2020 |
| Php | — | Upgrade to PHP version 7.2.34Upgrade to PHP version 7.3.23Upgrade to PHP version 7.4.11 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-dbgUpgrade php-pearUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-soapUpgrade php-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-xdebugUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-pecl-apcuUpgrade php-ffi-debuginfoUpgrade php-debugsourceUpgrade php-gmpUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoNo solution existsUpgrade php-gdUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-pgsqlUpgrade libzip-develUpgrade php-processUpgrade php-ffiUpgrade php-mysqlnd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-pecl-rrd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-dba-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-mbstringUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-odbc | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-process-debuginfoUpgrade phpUpgrade php-xml-debuginfoUpgrade libzipUpgrade php-intlUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ffi-debuginfoUpgrade php-odbcUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-ffiUpgrade php-debugsourceUpgrade php-ldap-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-apcu-develUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade libzip-develUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xmlrpcUpgrade php-processUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-cliUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-pdoUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-json | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php7Upgrade php7-ldapUpgrade php72-sysvsemUpgrade php7-shmopUpgrade php72-opensslUpgrade php72-develUpgrade php74-soapUpgrade php72-pcntlUpgrade php74-domUpgrade php72-sysvshmUpgrade php7-gdUpgrade php72-tidyUpgrade php72-fileinfoUpgrade php74-dbaUpgrade php74-gmpUpgrade php74-pharUpgrade php7-xslUpgrade php74-sysvsemUpgrade php74-sodiumUpgrade php74-xmlreaderUpgrade php74-opensslUpgrade php74-bcmathUpgrade php7-mbstringUpgrade php74-mbstringUpgrade php7-develUpgrade php72-exifUpgrade php74-intlUpgrade php7-domUpgrade php7-readlineUpgrade php7-tidyUpgrade php7-fileinfoUpgrade php7-dbaUpgrade php7-calendarUpgrade php72-iconvUpgrade php7-sodiumUpgrade php74-tidyUpgrade php7-jsonUpgrade php72-sqliteUpgrade php7-odbcUpgrade php72-pear-archive_tarUpgrade php7-gmpUpgrade php72-calendarUpgrade php72-intlUpgrade php7-sysvshmUpgrade php74Upgrade php74-posixUpgrade php7-bz2Upgrade php72-dbaUpgrade php72-pdoUpgrade php72-pearUpgrade php7-xmlreaderUpgrade php72-zipUpgrade apache2-mod_php74Upgrade php72-xslUpgrade php7-pear-archive_tarUpgrade php74-ldapUpgrade php7-firebirdUpgrade php7-xmlrpcUpgrade php7-opensslUpgrade php72-ftpUpgrade php7-pcntlUpgrade php74-pgsqlUpgrade php72-gdUpgrade php74-zlibUpgrade php72-wddxUpgrade php74-calendarUpgrade php72-mbstringUpgrade php74-fileinfoUpgrade php72-gettextUpgrade php72-pharUpgrade apache2-mod_php72Upgrade php72-shmopUpgrade php74-xmlrpcUpgrade php7-opcacheUpgrade php7-mysqlUpgrade php7-xmlwriterUpgrade php74-pcntlUpgrade php74-gettextUpgrade php72-zlibUpgrade php72-odbcUpgrade php72-tokenizerUpgrade php72-mysqlUpgrade php72-fastcgiUpgrade php7-pgsqlUpgrade php74-ftpUpgrade php72-ctypeUpgrade php7-zlibUpgrade php72-imapUpgrade php7-zipUpgrade php7-bcmathUpgrade php72-fpmUpgrade php7-sqliteUpgrade php74-pdoUpgrade php74-xslUpgrade php72-opcacheUpgrade php74-curlUpgrade php7-intlUpgrade php72-gmpUpgrade php74-fpmUpgrade php7-ftpUpgrade php74-fastcgiUpgrade php74-odbcUpgrade php7-posixUpgrade php72-xmlwriterUpgrade php7-sysvmsgUpgrade php74-sysvmsgUpgrade php74-readlineUpgrade php7-tokenizerUpgrade php7-snmpUpgrade php74-socketsUpgrade php7-ctypeUpgrade php72-domUpgrade php74-xmlwriterUpgrade php7-embedUpgrade php72Upgrade php72-posixUpgrade php72-sodiumUpgrade php72-readlineUpgrade php74-exifUpgrade php72-sysvmsgUpgrade php72-ldapUpgrade php74-tokenizerUpgrade php74-opcacheUpgrade php74-zipUpgrade php74-mysqlUpgrade php7-wddxUpgrade php72-snmpUpgrade php7-exifUpgrade php7-sysvsemUpgrade php74-shmopUpgrade php74-gdUpgrade php74-jsonUpgrade php7-enchantUpgrade php72-jsonUpgrade php72-bcmathUpgrade php7-pearUpgrade php7-soapUpgrade php72-curlUpgrade php7-iconvUpgrade php7-fastcgiUpgrade php7-pharUpgrade php72-enchantUpgrade php72-soapUpgrade php7-curlUpgrade php74-sysvshmUpgrade php74-iconvUpgrade php7-fpmUpgrade php72-socketsUpgrade php74-develUpgrade php72-xmlrpcUpgrade php72-pspellUpgrade php72-bz2Upgrade php72-pgsqlUpgrade php74-ctypeUpgrade php7-gettextUpgrade php74-sqliteUpgrade php7-pdoUpgrade php74-enchantUpgrade php7-testUpgrade php7-socketsUpgrade php74-bz2Upgrade php74-snmpUpgrade php72-xmlreaderUpgrade apache2-mod_php7 | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2Upgrade php7.2-cgiUpgrade php7.2-curlUpgrade php7.4-fpmUpgrade php7.2-fpmUpgrade libapache2-mod-php7.4Upgrade php7.4-curlUpgrade php7.2-cliUpgrade php7.4-cgiUpgrade php7.4-cli | Mar 9, 2021 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub