CVE-2019-11045
Low · 3.7CVSS
3.7
EPSS
8.8%
Published
Dec 23, 2019
CISA due date
—
Cloudanix analysis
A flaw in PHP could let attackers bypass file-access checks and read private files they are not supposed to see.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Moderate
- Impact
- Data Exposure
- Component
- Library
- Class
- Path Traversal
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
PHP DirectoryIterator accepts filenames containing embedded null bytes and treats the null as a string terminator, allowing path checks in calling code to be bypassed and granting unauthorized filesystem access.
Why it matters to the business
Attackers may read configuration files, credentials, or other sensitive data outside the intended directories, increasing risk of data exposure and compliance violations; widespread PHP usage raises urgency for patching.
How an attack unfolds
An attacker supplies a crafted path containing a null byte to an application that passes untrusted input to DirectoryIterator; the null byte truncates the path during internal checks, enabling traversal or access to files the application was not intended to expose.
How to fix it
Upgrade PHP to version 7.2.26 or later, 7.3.13 or later, or any 7.4.x release; replace or sanitize all uses of DirectoryIterator that accept untrusted input; apply vendor patches for affected distributions.
How to confirm the fix worked
Verify installed PHP version meets or exceeds the fixed releases; attempt to instantiate DirectoryIterator with a path containing a null byte and confirm the full path (including null) is rejected or handled safely.
Typical attack path
- Locate web applications or scripts that use PHP DirectoryIterator on user-controlled paths
- Craft a filename or directory entry containing an embedded null byte to truncate the checked prefix
- Trigger DirectoryIterator iteration or file operations with the malformed path
- Observe or exfiltrate files that should have been blocked by the original access-control logic
How to detect it
Review web-server and application logs for requests containing null-byte sequences (%00) in path parameters; search PHP error or access logs for DirectoryIterator operations on truncated or suspicious paths; correlate with file-access events outside expected directories.
- %00 in URI or path parameters
- DirectoryIterator.*\0
- open_basedir bypass attempts containing null byte
What your security team should do
- Prioritize upgrade of all PHP 7.2/7.3/7.4 installations to the fixed versions listed in remediation
- Audit source code for DirectoryIterator usage on paths derived from user input or external data
- Add runtime input validation that strips or rejects null bytes before any filesystem operations
- Monitor vulnerability disclosure feeds for downstream package updates in Fedora, Debian, Ubuntu, and openSUSE
The record
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | apcu-panel | 0 | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | libzip | 0 | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | libzip | 0 | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | libzip | 0 | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | libzip-devel | 0 | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | libzip-devel | 0 | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | libzip-devel | 0 | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | libzip-tools | 0 | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | libzip-tools | 0 | 1.5.2-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | libzip-tools | 0 | 1.5.2-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-bcmath | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-bcmath | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-bcmath | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-cli | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-cli | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-cli | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-common | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-common | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-common | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-dba | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-dba | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-dba | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-dbg | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-dbg | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-dbg | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-devel | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-devel | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-devel | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-embedded | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-embedded | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-embedded | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-enchant | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-enchant | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-enchant | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-fpm | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-fpm | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-fpm | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-gd | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-gd | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-gd | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-gmp | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-gmp | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-gmp | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-intl | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-intl | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-intl | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-json | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-json | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-json | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-ldap | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-ldap | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-ldap | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-mbstring | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-mbstring | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-mbstring | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-mysqlnd | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-mysqlnd | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-mysqlnd | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-odbc | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-odbc | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-odbc | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-opcache | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-opcache | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-opcache | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pdo | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pdo | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pdo | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pear | 0 | 1:1.10.9-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.17-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.17-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.17-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.17-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.8.0-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.8.0-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.8.0-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.15.4-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.15.4-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.15.4-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-pgsql | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pgsql | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pgsql | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-process | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-process | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-process | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-recode | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-recode | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-recode | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-snmp | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-snmp | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-snmp | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-soap | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-soap | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-soap | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-xml | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-xml | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-xml | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| AlmaLinux:8 | php-xmlrpc | 0 | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-xmlrpc | 0 | 7.3.20-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-xmlrpc | 0 | 7.3.20-1.module_el8.5.0+152+112d3b8c |
| Debian:10 | php7.3 | 0 | 7.3.14-1~deb10u1 |
| Debian:8 | php5 | 0 | 5.6.40+dfsg-0+deb8u8 |
| Debian:9 | php7.0 | 0 | 7.0.33-0+deb9u7 |
| Mageia:7 | php | 0 | 7.3.13-1.mga7 |
| Red Hat:enterprise_linux:8::appstream | apcu-panel | 0 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip-debuginfo | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip-debugsource | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip-devel | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools-debuginfo | 0 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-bcmath | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-bcmath-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-cli | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-cli-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-common | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-common-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-dba | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-dba-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-dbg | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-dbg-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-debugsource | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-devel | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-embedded | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-embedded-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-enchant | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-enchant-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-fpm | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-fpm-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-gd | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-gd-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-gmp | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-gmp-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-intl | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-intl-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-json | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-json-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-ldap | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-ldap-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-mbstring | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-mbstring-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-mysqlnd | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-mysqlnd-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-odbc | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-odbc-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-opcache | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-opcache-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-pdo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-pdo-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-pear | 0 | 1:1.10.9-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-apcu | 0 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-apcu-debuginfo | 0 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-apcu-debugsource | 0 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-apcu-devel | 0 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-rrd | 0 | 0:2.0.1-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-rrd-debuginfo | 0 | 0:2.0.1-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-rrd-debugsource | 0 | 0:2.0.1-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-xdebug | 0 | 0:2.8.0-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-xdebug-debuginfo | 0 | 0:2.8.0-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-xdebug-debugsource | 0 | 0:2.8.0-1.module+el8.2.0+4968+1d5097db |
| Red Hat:enterprise_linux:8::appstream | php-pecl-zip | 0 | 0:1.15.4-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-zip-debuginfo | 0 | 0:1.15.4-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pecl-zip-debugsource | 0 | 0:1.15.4-1.module+el8.1.0+3189+a1bff096 |
| Red Hat:enterprise_linux:8::appstream | php-pgsql | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-pgsql-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-process | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-process-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-recode | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-recode-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-snmp | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-snmp-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-soap | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-soap-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-xml | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-xml-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-xmlrpc | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:enterprise_linux:8::appstream | php-xmlrpc-debuginfo | 0 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-bcmath | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-cli | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-common | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-dba | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-dbg | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-debuginfo | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-devel | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-embedded | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-enchant | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-fpm | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-gd | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-gmp | 0 | 0:7.3.20-1.el7 |
| Red Hat:rhel_software_collections:3::el7 | rh-php73-php-intl | 0 | 0:7.3.20-1.el7 |
Related vulnerabilities
- CVE-2024-11233 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an… Also affects apcu-panel
- CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using… Also affects apcu-panel
- CVE-2024-8929 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile… Also affects apcu-panel
- CVE-2024-9026 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using… Also affects apcu-panel
- CVE-2024-8927 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12… Also affects apcu-panel
- CVE-2024-8925 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous… Also affects apcu-panel
- CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j… Also affects apcu-panel
- CVE-2023-0567 In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify()… Also affects apcu-panel