In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-processUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-intlUpgrade php-embeddedUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-mbstringUpgrade php-jsonUpgrade php-pecl-zipUpgrade libzipUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-enchantUpgrade php-gdUpgrade php-ffiUpgrade php-gmpUpgrade php-dbgUpgrade php-pearUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-bcmathUpgrade php-develUpgrade php-pdoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-commonUpgrade phpUpgrade php-fpmUpgrade php-ldapUpgrade php-odbcUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-snmp | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdoUpgrade libzip-develUpgrade php-processUpgrade php-fpmUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-pecl-zip-debugsourceUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-develUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pearUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-jsonUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-pecl-apcuUpgrade php-gmpUpgrade apcu-panelUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-fpm-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-ffiUpgrade php-process-debuginfoUpgrade php-odbcUpgrade php-intlUpgrade php-xmlrpc-debuginfoUpgrade php-dbaUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsource | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2021 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pdoUpgrade phpUpgrade php-odbcUpgrade php-commonUpgrade php-ldapUpgrade php-cliUpgrade php-fpmUpgrade php-recodeUpgrade php-xmlUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-xmlrpc | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade php-bcmathUpgrade php-dbaUpgrade phpUpgrade php-develUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-pdoUpgrade php-pearUpgrade php-ldapUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-processUpgrade php-embeddedUpgrade php-enchantUpgrade php-gmpUpgrade libzipUpgrade php-opcacheUpgrade apcu-panelUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-snmpUpgrade php-ffiUpgrade php-commonUpgrade php-odbcUpgrade php-intlUpgrade php-cliUpgrade libzip-develUpgrade php-dbgUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-mbstring | Nov 17, 2021 | May 15, 2020 |
| Php | — | Upgrade to PHP version 7.4.11Upgrade to PHP version 7.3.23Upgrade to PHP version 7.2.34 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-rrdUpgrade php-soap-debuginfoUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-processUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-ffiUpgrade php-dbg-debuginfoUpgrade php-intlUpgrade php-fpm-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-embeddedUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade phpUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-apcuUpgrade libzipUpgrade php-mbstring-debuginfoUpgrade php-gdUpgrade php-pecl-xdebug-debuginfoUpgrade php-ffi-debuginfoUpgrade php-fpmUpgrade php-enchant-debuginfoNo solution existsUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pdo-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbgUpgrade php-pearUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-soapUpgrade php-bcmath | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-snmp-debuginfoUpgrade php-xmlUpgrade php-snmpUpgrade php-fpmUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-mbstringUpgrade libzip-develUpgrade php-gmpUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-gdUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-dba-debuginfoUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-ldapUpgrade php-pecl-rrd-debugsourceUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmp-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade phpUpgrade php-odbcUpgrade libzip-toolsUpgrade php-odbc-debuginfoUpgrade php-ffiUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade libzip-debugsourceUpgrade libzipUpgrade php-debuginfoUpgrade php-ffi-debuginfo | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php74-bcmathUpgrade php7-pear-archive_tarUpgrade php7Upgrade php7-xslUpgrade php72-tidyUpgrade php74-sodiumUpgrade php7-gdUpgrade php7-odbcUpgrade php72-pcntlUpgrade php74-tidyUpgrade php7-xmlreaderUpgrade php72-sysvshmUpgrade php72-calendarUpgrade php74-gmpUpgrade php7-ldapUpgrade php74-intlUpgrade php7-bz2Upgrade php72-intlUpgrade php74-zlibUpgrade php72-wddxUpgrade php7-sodiumUpgrade php7-sysvshmUpgrade php72-dbaUpgrade php74-mbstringUpgrade php72-exifUpgrade apache2-mod_php74Upgrade php74-posixUpgrade php72-gdUpgrade php7-pcntlUpgrade php74-pgsqlUpgrade php74-soapUpgrade php74-domUpgrade php72-mbstringUpgrade php72-gettextUpgrade php72-pharUpgrade php74-calendarUpgrade apache2-mod_php72Upgrade php74-fileinfoUpgrade php7-xmlrpcUpgrade php7-domUpgrade php72-fileinfoUpgrade php72-sqliteUpgrade php74-opensslUpgrade php72-ftpUpgrade php7-firebirdUpgrade php72-sysvsemUpgrade php72-zipUpgrade php7-mbstringUpgrade php72-pearUpgrade php7-opensslUpgrade php74-xmlreaderUpgrade php7-gmpUpgrade php72-pear-archive_tarUpgrade php74-dbaUpgrade php7-readlineUpgrade php74Upgrade php7-develUpgrade php7-jsonUpgrade php72-iconvUpgrade php72-xslUpgrade php7-tidyUpgrade php7-shmopUpgrade php7-calendarUpgrade php7-dbaUpgrade php7-fileinfoUpgrade php72-develUpgrade php74-ldapUpgrade php72-opensslUpgrade php72-pdoUpgrade php74-pharUpgrade php74-sysvsemUpgrade php72-odbcUpgrade php7-pharUpgrade php72-mysqlUpgrade php7-tokenizerUpgrade php72-sodiumUpgrade php7-ctypeUpgrade php74-odbcUpgrade php72-gmpUpgrade php72-tokenizerUpgrade php72-zlibUpgrade php74-xmlrpcUpgrade php74-sqliteUpgrade php74-iconvUpgrade php72-pgsqlUpgrade php74-enchantUpgrade php7-iconvUpgrade php7-testUpgrade php7-curlUpgrade php72-enchantUpgrade php7-soapUpgrade php72-soapUpgrade php72-bcmathUpgrade php74-sysvshmUpgrade php72-curlUpgrade php7-pearUpgrade php7-fastcgiUpgrade php72-pspellUpgrade php72-socketsUpgrade php72-fpmUpgrade php74-opcacheUpgrade php72-snmpUpgrade php74-gdUpgrade php74-mysqlUpgrade php74-xslUpgrade php7-zipUpgrade php7-pgsqlUpgrade php74-zipUpgrade apache2-mod_php7Upgrade php74-develUpgrade php72-xmlrpcUpgrade php74-shmopUpgrade php74-gettextUpgrade php7-sysvmsgUpgrade php72-domUpgrade php74-socketsUpgrade php74-ftpUpgrade php7-posixUpgrade php74-fastcgiUpgrade php7-enchantUpgrade php72-fastcgiUpgrade php74-pcntlUpgrade php7-exifUpgrade php7-xmlwriterUpgrade php72-shmopUpgrade php7-sqliteUpgrade php7-intlUpgrade php7-bcmathUpgrade php72-jsonUpgrade php7-zlibUpgrade php72-ctypeUpgrade php7-mysqlUpgrade php74-pdoUpgrade php7-sysvsemUpgrade php72-imapUpgrade php74-jsonUpgrade php7-opcacheUpgrade php72-opcacheUpgrade php7-wddxUpgrade php72-xmlreaderUpgrade php74-curlUpgrade php7-socketsUpgrade php74-snmpUpgrade php74-ctypeUpgrade php74-bz2Upgrade php72-bz2Upgrade php7-pdoUpgrade php7-gettextUpgrade php74-tokenizerUpgrade php7-fpmUpgrade php7-snmpUpgrade php74-readlineUpgrade php74-exifUpgrade php72-sysvmsgUpgrade php74-fpmUpgrade php72-ldapUpgrade php72Upgrade php7-ftpUpgrade php7-embedUpgrade php72-xmlwriterUpgrade php74-sysvmsgUpgrade php74-xmlwriterUpgrade php72-posixUpgrade php72-readline | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade php7.2-fpmUpgrade php7.4-cgiUpgrade libapache2-mod-php7.4Upgrade php7.4-cliUpgrade php7.2-cliUpgrade php7.4-curlUpgrade php7.2-curlUpgrade libapache2-mod-php7.2Upgrade php7.4-fpmUpgrade php7.2-cgi | Mar 9, 2021 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub