Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-7069HistoryOct 02, 2020 - 3:15 p.m.
CVE-2020-7069
2020-10-0215:15:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.002 Low
EPSS
Percentile
64.5%
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | php7.3 | < 7.3.27-1~deb10u1 | php7.3_7.3.27-1~deb10u1_all.deb |
| Debian | 11 | all | php7.4 | < 7.4.11-1 | php7.4_7.4.11-1_all.deb |
Related
veracode
veracode
Insecure Encryption
2020-10-02 06:07:39
cvelist
cvelist
CVE-2020-7069 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
2020-09-29 00:00:00
cve
cve
CVE-2020-7069
2020-10-02 15:15:00
prion
prion
Code injection
2020-10-02 15:15:00
redhatcve
redhatcve
CVE-2020-7069
2020-10-06 21:25:47
ubuntucve
ubuntucve
CVE-2020-7069
2020-10-02 00:00:00
osv
osv
CVE-2020-7069
2020-10-02 15:15:12
BIT-php-2020-7069
2024-03-06 11:06:06
Moderate: php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
f5
f5
K99862460 : PHP vulnerability CVE-2020-7069
2020-10-22 00:00:00
alpinelinux
alpinelinux
CVE-2020-7069
2020-10-02 15:15:00
fedora
fedora
[SECURITY] Fedora 31 Update: php-7.3.23-1.fc31
2020-10-07 20:45:40
[SECURITY] Fedora 33 Update: php-7.4.11-1.fc33
2020-10-04 00:16:01
[SECURITY] Fedora 32 Update: php-7.4.11-1.fc32
2020-10-07 20:37:09
nessus
nessus
openSUSE Security Update : php7 (openSUSE-2020-1703)
2020-10-21 00:00:00
PHP 7.2 < 7.2.34 / 7.3.x < 7.3.23 / 7.4.x < 7.4.11 Mulitiple Vulnerabilities
2020-10-09 00:00:00
PHP 7.4.x < 7.4.11 Multiple Vulnerabilities
2020-10-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4583-1)
2020-10-15 00:00:00
PHP < 7.2.34, 7.3 < 7.3.23, 7.4 < 7.4.11 Multiple Vulnerabilities (Oct 2020) - Linux
2020-10-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2997-1)
2021-04-19 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2020-10-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package php7 version 7.3.23-alt1
2020-10-10 00:00:00
Security fix for the ALT Linux 8 package php7 version 7.2.34-alt1
2020-10-13 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2020-12-23 00:00:00
amazon
amazon
Medium: php72, php73
2020-10-26 18:16:00
rocky
rocky
php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
redhat
redhat
oraclelinux
oraclelinux
php:7.4 security, bug fix, and enhancement update
2021-11-16 00:00:00
almalinux
almalinux
Moderate: php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
debian
debian
[SECURITY] [DSA 4856-1] php7.3 security update
2021-02-17 22:08:33
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00