CVE-2019-11048
Temporary files are not cleaned after OOM when parsing HTTP request data
02 Description
Temporary files are not cleaned after OOM when parsing HTTP request data
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 6.26% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 93.4% of scored records. A rank, not a probability.
- NVD base score
- 5.3 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- Moderate. Red Hat's rating for its own products, not a CVSS rating.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2020-05-20 07:15Z6 YR AGO
- Last updated
- 2024-09-16 18:13Z2 YR AGO
- Reserved
- 2019-04-09
- Assigning CNA
- php
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 5.3)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- Data version
- 5.1
- Document digest
- 1bd4f63e193ff0b92dcb4344c60811453ad05c552e6c54c7675cc26bdd1b3827
05 Affected products
06 References
- lists.fedoraproject.orgFEDORA-2020-8838d072d5https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/
- lists.fedoraproject.orgFEDORA-2020-9fa7f4e25chttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/
- usn.ubuntu.comUSN-4375-1https://usn.ubuntu.com/4375-1/
- lists.opensuse.orgopenSUSE-SU-2020:0847http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html
- lists.debian.org[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security updatehttps://lists.debian.org/debian-lts-announce/2020/06/msg00033.html
- www.debian.orgDSA-4717https://www.debian.org/security/2020/dsa-4717
- www.debian.orgDSA-4719https://www.debian.org/security/2020/dsa-4719
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- bugs.php.nethttps://bugs.php.net/bug.php?id=78875
- bugs.php.nethttps://bugs.php.net/bug.php?id=78876
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200528-0006/
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.tenable.comhttps://www.tenable.com/security/tns-2021-14
07 Fixed in
AlmaLinux 8
- apcu-panel Fixed in 5.1.17-1.module_el8.3.0+2009+b272fdef
- libzip Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- libzip-devel Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- libzip-tools Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- php Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-bcmath Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-cli Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-common Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-dba Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-dbg Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-devel Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-embedded Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-enchant Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-fpm Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-gd Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-gmp Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-intl Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-json Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-ldap Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-mbstring Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-mysqlnd Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-odbc Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-opcache Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-pdo Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-pear Fixed in 1:1.10.9-1.module_el8.3.0+2009+b272fdef
- php-pecl-apcu Fixed
A version is affected if any line below covers it.
- Affected before 5.1.17-1.module_el8.3.0+2009+b272fdef
- Affected before 5.1.17-1.module_el8.4.0+2229+b272fdef
- Affected before 5.1.17-1.module_el8.5.0+152+112d3b8c
- php-pecl-apcu-devel Fixed
A version is affected if any line below covers it.
- Affected before 5.1.17-1.module_el8.3.0+2009+b272fdef
- Affected before 5.1.17-1.module_el8.4.0+2229+b272fdef
- Affected before 5.1.17-1.module_el8.5.0+152+112d3b8c
- php-pecl-rrd Fixed
A version is affected if any line below covers it.
- Affected before 2.0.1-1.module_el8.3.0+2009+b272fdef
- Affected before 2.0.1-1.module_el8.4.0+2229+b272fdef
- Affected before 2.0.1-1.module_el8.6.0+2750+78feabcb
- php-pecl-xdebug Fixed
A version is affected if any line below covers it.
- Affected before 2.8.0-1.module_el8.3.0+2009+b272fdef
- Affected before 2.8.0-1.module_el8.4.0+2229+b272fdef
- Affected before 2.8.0-1.module_el8.5.0+152+112d3b8c
- php-pecl-zip Fixed
A version is affected if any line below covers it.
- Affected before 1.15.4-1.module_el8.3.0+2009+b272fdef
- Affected before 1.15.4-1.module_el8.4.0+2229+b272fdef
- Affected before 1.15.4-1.module_el8.5.0+152+112d3b8c
- php-pgsql Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-process Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-recode Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-snmp Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-soap Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-xml Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-xmlrpc Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.
CloudLinux 8
- apcu-panel Fixed in 5.1.17-1.module_el8.3.0+2009+b272fdef
- libzip Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- libzip-devel Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- libzip-tools Fixed
A version is affected if any line below covers it.
- Affected before 1.5.2-1.module_el8.3.0+2009+b272fdef
- Affected before 1.5.2-1.module_el8.4.0+2229+b272fdef
- Affected before 1.5.2-1.module_el8.5.0+152+112d3b8c
- php Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-bcmath Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-cli Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-common Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-dba Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-dbg Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-devel Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-embedded Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-enchant Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-fpm Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-gd Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-gmp Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-intl Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-json Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-ldap Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-mbstring Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-mysqlnd Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-odbc Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-opcache Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-pdo Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-pear Fixed in 1:1.10.9-1.module_el8.3.0+2009+b272fdef
- php-pecl-apcu Fixed
A version is affected if any line below covers it.
- Affected before 5.1.17-1.module_el8.3.0+2009+b272fdef
- Affected before 5.1.17-1.module_el8.4.0+2229+b272fdef
- Affected before 5.1.17-1.module_el8.5.0+152+112d3b8c
- php-pecl-apcu-devel Fixed
A version is affected if any line below covers it.
- Affected before 5.1.17-1.module_el8.3.0+2009+b272fdef
- Affected before 5.1.17-1.module_el8.4.0+2229+b272fdef
- Affected before 5.1.17-1.module_el8.5.0+152+112d3b8c
- php-pecl-rrd Fixed
A version is affected if any line below covers it.
- Affected before 2.0.1-1.module_el8.3.0+2009+b272fdef
- Affected before 2.0.1-1.module_el8.4.0+2229+b272fdef
- Affected before 2.0.1-1.module_el8.6.0+2750+78feabcb
- php-pecl-xdebug Fixed
A version is affected if any line below covers it.
- Affected before 2.8.0-1.module_el8.3.0+2009+b272fdef
- Affected before 2.8.0-1.module_el8.4.0+2229+b272fdef
- Affected before 2.8.0-1.module_el8.5.0+152+112d3b8c
- php-pecl-zip Fixed
A version is affected if any line below covers it.
- Affected before 1.15.4-1.module_el8.3.0+2009+b272fdef
- Affected before 1.15.4-1.module_el8.4.0+2229+b272fdef
- Affected before 1.15.4-1.module_el8.5.0+152+112d3b8c
- php-pgsql Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-process Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-recode Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-snmp Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-soap Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-xml Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
- php-xmlrpc Fixed
A version is affected if any line below covers it.
- Affected before 7.3.20-1.module_el8.3.0+2009+b272fdef
- Affected before 7.3.20-1.module_el8.4.0+2229+b272fdef
- Affected before 7.3.20-1.module_el8.5.0+152+112d3b8c
Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.
Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.
Debian 11
- php7.4 Fixed in 7.4.9-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu 16.04 LTS
- php7.0 Fixed in 7.0.33-0ubuntu0.16.04.15
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu 18.04 LTS
- php7.2 Fixed in 7.2.24-0ubuntu0.18.04.6
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu 20.04 LTS
- php7.4 Fixed in 7.4.3-4ubuntu2.2
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu Pro 14.04 LTS
- php5 Fixed in 5.5.9+dfsg-1ubuntu4.29+esm12Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.