CVE-2023-0567
High · 7.7CVSS
7.7
EPSS
0.9%
Published
Mar 1, 2023
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in how PHP checks certain old-style passwords could let attackers log in to accounts without knowing the real password if a bad stored value is present.
Exploit Available
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Theoretical
- Impact
- Privilege Gain
- Component
- Library
- Class
- Cryptographic Weakness
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
password_verify() incorrectly treats certain malformed Blowfish hashes as valid, allowing authentication bypass for any password when such a hash exists in the password store.
Why it matters to the business
Attackers may gain unauthorized account access, increasing risk of data exposure or account takeover; low exploit prevalence and absence from known exploited lists reduce immediate urgency but still require prompt patching across PHP deployments.
How an attack unfolds
An attacker identifies or plants an invalid Blowfish hash in the application's password database, then supplies any password string during login; password_verify() accepts the malformed hash as correct and grants access without further checks.
How to fix it
Upgrade PHP to 8.0.28 or later, 8.1.16 or later, or 8.2.3 or later; rebuild applications against the fixed php-src commit aa5f9f05194e534b9644ebdcfd073c1493d17d56; audit and regenerate any suspect password hashes stored in databases.
How to confirm the fix worked
Verify running PHP version meets or exceeds the fixed releases; test password_verify() against known malformed Blowfish hashes to confirm rejection; review application code for direct use of password_verify() on untrusted hash inputs.
Typical attack path
- Locate or insert an invalid Blowfish hash into the password database
- Submit arbitrary password to the application's authentication endpoint
- password_verify() returns true due to the flaw, bypassing credential validation
- Obtain authenticated session and perform further actions on the compromised account
How to detect it
Examine web server and application logs for successful authentications using passwords that fail normal verification tests; search for use of password_verify() on hashes beginning with $2y$ or $2a$ that may be malformed; correlate with any prior incidents involving mass password resets or hash imports.
What your security team should do
- Apply the listed PHP upgrades immediately on all affected installations
- Scan password databases for entries that may contain invalid Blowfish hashes and force password resets where found
- Enable logging of authentication attempts and monitor for anomalous successful logins
- Review dependency trees for any downstream PHP packages that may still embed vulnerable versions
The record
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | apcu-panel | 0 | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | apcu-panel | 0 | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | libzip | 0 | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | libzip | 0 | 1.7.3-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | libzip | 0 | 1.6.1-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | libzip | 0 | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | libzip | 0 | 1.6.1-1.module_el8.6.0+3239+bedf0508 |
| AlmaLinux:8 | libzip-devel | 0 | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | libzip-devel | 0 | 1.7.3-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | libzip-devel | 0 | 1.6.1-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | libzip-devel | 0 | 1.6.1-1.module_el8.6.0+3239+bedf0508 |
| AlmaLinux:8 | libzip-tools | 0 | 1.7.3-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | libzip-tools | 0 | 1.7.3-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | libzip-tools | 0 | 1.6.1-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | libzip-tools | 0 | 1.6.1-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | libzip-tools | 0 | 1.6.1-1.module_el8.6.0+3239+bedf0508 |
| AlmaLinux:8 | php | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-bcmath | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-bcmath | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-cli | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-cli | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-common | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-common | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-dba | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-dba | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-dbg | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-dbg | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-devel | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-devel | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-embedded | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-embedded | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-enchant | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-enchant | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-ffi | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-ffi | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-fpm | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-fpm | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-gd | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-gd | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-gmp | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-gmp | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-intl | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-intl | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-json | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-ldap | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-ldap | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-mbstring | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-mbstring | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-mysqlnd | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-mysqlnd | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-odbc | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-odbc | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-opcache | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-opcache | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pdo | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-pdo | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pear | 0 | 1:1.10.13-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pear | 0 | 1:1.10.13-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.20-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.18-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pecl-apcu | 0 | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.20-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.20-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.18-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pecl-apcu-devel | 0 | 5.1.18-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.3-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.3-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.3.0+2009+b272fdef |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.4.0+2229+b272fdef |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-rrd | 0 | 2.0.1-1.module_el8.6.0+3059+d65eee13 |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.9.5-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.9.5-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-xdebug | 0 | 2.9.5-1.module_el8.6.0+3239+bedf0508 |
| AlmaLinux:8 | php-pecl-xdebug3 | 0 | 3.1.2-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pecl-xdebug3 | 0 | 3.1.2-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.19.2-1.module_el8.6.0+2739+efabdb8f |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.19.2-1.module_el8.6.0+3061+6878dd1b |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.18.2-1.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.18.2-1.module_el8.6.0+2750+78feabcb |
| AlmaLinux:8 | php-pecl-zip | 0 | 1.18.2-1.module_el8.6.0+3239+bedf0508 |
| AlmaLinux:8 | php-pgsql | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-pgsql | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-process | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-process | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-snmp | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-snmp | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-soap | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-soap | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-xml | 0 | 8.0.30-1.module_el8.8.0+3655+3335cff6 |
| AlmaLinux:8 | php-xml | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:8 | php-xmlrpc | 0 | 7.4.33-2.module_el8.10.0+3935+28808425 |
| AlmaLinux:9 | apcu-panel | 0 | 5.1.21-1.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-bcmath | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-bcmath | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-cli | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-cli | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-common | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-common | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-dba | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-dba | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-dbg | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-dbg | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-devel | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-devel | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-embedded | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-embedded | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-enchant | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-enchant | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-ffi | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-ffi | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-fpm | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-fpm | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-gd | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-gd | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-gmp | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-gmp | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-intl | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-intl | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-ldap | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-ldap | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-mbstring | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-mbstring | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-mysqlnd | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-mysqlnd | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-odbc | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-odbc | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-opcache | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-opcache | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-pdo | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-pdo | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-pecl-apcu | 0 | 5.1.21-1.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php-pecl-apcu-devel | 0 | 5.1.21-1.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php-pecl-rrd | 0 | 2.0.3-4.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php-pecl-xdebug3 | 0 | 3.1.4-1.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php-pecl-zip | 0 | 1.20.1-1.module_el9.1.0+15+94ba28e4 |
| AlmaLinux:9 | php-pgsql | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-pgsql | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-process | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-process | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-snmp | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-snmp | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-soap | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-soap | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| AlmaLinux:9 | php-xml | 0 | 8.0.30-1.el9_2 |
| AlmaLinux:9 | php-xml | 0 | 8.1.27-1.module_el9.3.0+53+44872dd1 |
| Bitnami | libphp | 8.0.0 | 8.0.28 |
| Bitnami | php | 8.0.0 | 8.0.28 |
| Bitnami | php-min | 8.0.0 | 8.0.28 |
| Debian:10 | php7.3 | 0 | 7.3.31-1~deb10u3 |
| Debian:11 | php7.4 | 0 | 7.4.33-1+deb11u3 |
| Debian:12 | php8.2 | 0 | 8.2.4-1 |
| Debian:13 | php8.2 | 0 | 8.2.4-1 |
| Mageia:8 | php | 0 | 8.0.28-1.mga8 |
| Red Hat:enterprise_linux:8::appstream | apcu-panel | 0 | 0:5.1.18-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | apcu-panel | 0 | 0:5.1.20-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip-debuginfo | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip-debuginfo | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip-debugsource | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip-debugsource | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip-devel | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip-devel | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools-debuginfo | 0 | 0:1.6.1-1.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | libzip-tools-debuginfo | 0 | 0:1.7.3-1.module+el8.6.0+13671+84712317 |
| Red Hat:enterprise_linux:8::appstream | php | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-bcmath | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-bcmath | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-bcmath-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-bcmath-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-cli | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-cli | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-cli-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-cli-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-common | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-common | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-common-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-common-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-dba | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-dba | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-dba-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-dba-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-dbg | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-dbg | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-dbg-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-dbg-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-debuginfo | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-debuginfo | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-debugsource | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-debugsource | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
| Red Hat:enterprise_linux:8::appstream | php-devel | 0 | 0:7.4.33-2.module+el8.10.0+22485+a3539972 |
| Red Hat:enterprise_linux:8::appstream | php-devel | 0 | 0:8.0.30-1.module+el8.8.0+20302+42d2b711 |
Related vulnerabilities
- CVE-2024-11233 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an… Also affects apcu-panel
- CVE-2024-11234 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using… Also affects apcu-panel
- CVE-2024-8929 In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile… Also affects apcu-panel
- CVE-2024-9026 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using… Also affects apcu-panel
- CVE-2024-8927 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12… Also affects apcu-panel
- CVE-2024-8925 In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous… Also affects apcu-panel
- CVE-2024-2756 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j… Also affects apcu-panel
- CVE-2022-31631 A flaw was found in PHP. Also affects apcu-panel