Lucene search
Redhat.comRH:CVE-2020-7069HistoryOct 06, 2020 - 9:25 p.m.
CVE-2020-7069
2020-10-0621:25:47
redhat.com
access.redhat.com
24
php version
aes-ccm mode
openssl_encrypt
iv length
EPSS
0.002
Percentile
61.5%
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
Related
osv
osv
CVE-2020-7069
2020-10-02 15:15:12
BIT-php-2020-7069
2024-03-06 11:06:06
php5, php7.0, php7.2, php7.4 vulnerabilities
2020-10-14 17:42:17
debiancve
debiancve
CVE-2020-7069
2020-10-02 15:15:12
prion
prion
Code injection
2020-10-02 15:15:00
veracode
veracode
Insecure Encryption
2020-10-02 06:07:39
cvelist
cvelist
CVE-2020-7069 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
2020-10-02 14:14:45
cve
cve
CVE-2020-7069
2020-10-02 15:15:12
ubuntucve
ubuntucve
CVE-2020-7069
2020-10-02 00:00:00
f5
f5
K99862460 : PHP vulnerability CVE-2020-7069
2020-10-22 00:00:00
alpinelinux
alpinelinux
CVE-2020-7069
2020-10-02 15:15:12
nvd
nvd
CVE-2020-7069
2020-10-02 15:15:12
nessus
nessus
PHP 7.3.x < 7.3.23 Multiple Vulnerabilities
2020-10-09 00:00:00
Fedora 32 : php (2020-4fe6b116e5)
2020-10-08 00:00:00
GLSA-202012-16 : PHP: Multiple vulnerabilities
2020-12-24 00:00:00
openvas
openvas
Fedora: Security Advisory for php (FEDORA-2020-94763cb98b)
2020-10-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2943-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4583-2)
2020-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: php-7.4.11-1.fc33
2020-10-04 00:16:01
[SECURITY] Fedora 32 Update: php-7.4.11-1.fc32
2020-10-07 20:37:09
[SECURITY] Fedora 31 Update: php-7.3.23-1.fc31
2020-10-07 20:45:40
suse
suse
Security update for php7 (important)
2020-10-29 00:00:00
Security update for php7 (important)
2020-10-20 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2020-10-14 00:00:00
PHP vulnerabilities
2020-10-27 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2020-12-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package php7 version 7.2.34-alt1
2020-10-13 00:00:00
Security fix for the ALT Linux 9 package php7 version 7.3.23-alt1
2020-10-10 00:00:00
amazon
amazon
Medium: php72, php73
2020-10-26 18:16:00
almalinux
almalinux
Moderate: php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
oraclelinux
oraclelinux
php:7.4 security, bug fix, and enhancement update
2021-11-16 00:00:00
debian
debian
[SECURITY] [DSA 4856-1] php7.3 security update
2021-02-17 22:08:33
redhat
redhat
rocky
rocky
php:7.4 security, bug fix, and enhancement update
2021-11-09 08:42:20
oracle
oracle
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00