CVE catalog

CVE-2023-3823

php8.2: CVE-2023-3823

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.64% · Oct 25, 2026

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp8.2bookworm8.2.32-1~deb12u1fixed
Debianphp8.2bookworm-security8.2.35-1~deb12u1fixed
Ubuntuphp7.0pro7.0.1-5vulnerable
Ubuntuphp7.0pro7.0.1-6vulnerable
Ubuntuphp7.0pro7.0.2-1vulnerable
Ubuntuphp7.0pro7.0.2-3vulnerable
Ubuntuphp7.0pro7.0.2-4vulnerable
Ubuntuphp7.0pro7.0.2-5vulnerable
Ubuntuphp7.0pro7.0.3-2vulnerable
Ubuntuphp7.0pro7.0.3-3vulnerable
Ubuntuphp7.0pro7.0.3-9ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.30-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.32-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm8fixed
Ubuntuphp7.2pro7.2.1-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.3-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.5-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.10-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.17-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.4vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.6vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.7vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.8vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.9vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.10vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.11vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.12vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.13vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.15vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.16vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm2fixed
Ubuntuphp7.420.047.4.3-4build1vulnerable
Ubuntuphp7.420.047.4.3-4build2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1.1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.4vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.5vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.6vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.7vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.8vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.9vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.10vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.11vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.12vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.13vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.15vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.16vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.17vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.18vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.19vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.20fixed
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.3vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.4vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.5vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.6vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.8vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.9vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.10vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.11vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.13vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.14fixed
Ubuntuphp5pro5.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.25vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.26vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.27vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm8vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm10vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm15vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm18vulnerable
Ubuntuphp7.0pro7.0.1-5vulnerable
Ubuntuphp7.0pro7.0.1-6vulnerable
Ubuntuphp7.0pro7.0.2-1vulnerable
Ubuntuphp7.0pro7.0.2-3vulnerable
Ubuntuphp7.0pro7.0.2-4vulnerable
Ubuntuphp7.0pro7.0.2-5vulnerable
Ubuntuphp7.0pro7.0.3-2vulnerable
Ubuntuphp7.0pro7.0.3-3vulnerable
Ubuntuphp7.0pro7.0.3-9ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.30-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.32-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm8vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm10fixed
Ubuntuphp7.2pro7.2.1-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.3-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.5-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.10-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.17-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.4vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.6vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.7vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.8vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.9vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.10vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.11vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.12vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.13vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.15vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.16vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm4fixed
Ubuntuphp7.420.047.4.3-4build1vulnerable
Ubuntuphp7.420.047.4.3-4build2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu1.1vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.2vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.4vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.5vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.6vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.7vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.8vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.9vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.10vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.11vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.12vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.13vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.15vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.16vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.17vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.18vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.19vulnerable
Ubuntuphp7.420.047.4.3-4ubuntu2.20fixed
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.3vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.4vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.5vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.6vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.8vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.9vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.10vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.11vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.13vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.14fixed
Susephp74linux enterprise module for web and scripting 127.4.33-1.62.1fixed
Susephp74linux enterprise software development kit 12 sp57.4.33-1.62.1fixed
Suseapache2-mod_php7linux enterprise module for legacy 15 sp47.4.33-150400.4.28.1fixed
Susephp7linux enterprise module for legacy 15 sp47.4.33-150400.4.28.1fixed
Susephp7-fastcgilinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1fixed
Susephp7-fpmlinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1fixed
Suseapache2-mod_php7linux enterprise module for legacy 15 sp57.4.33-150400.4.28.1fixed
Susephp7linux enterprise module for legacy 15 sp57.4.33-150400.4.28.1fixed
Susephp7-fastcgilinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1fixed
Susephp7-fpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1fixed
Susephp7-embedlinux enterprise module for package hub 15 sp47.4.33-150400.4.28.1fixed
Susephp7-embedlinux enterprise module for package hub 15 sp57.4.33-150400.4.28.1fixed
Opensuseapache2-mod_php7leap 15.47.4.33-150400.4.28.1fixed
Opensusephp7leap 15.47.4.33-150400.4.28.1fixed
Opensusephp7-embedleap 15.47.4.33-150400.4.28.1fixed
Opensusephp7-fastcgileap 15.47.4.33-150400.4.28.1fixed
Opensusephp7-fpmleap 15.47.4.33-150400.4.28.1fixed
Opensusephp7-testleap 15.47.4.33-150400.4.28.1fixed
Opensuseapache2-mod_php7leap 15.57.4.33-150400.4.28.1fixed
Opensusephp7leap 15.57.4.33-150400.4.28.1fixed
Opensusephp7-embedleap 15.57.4.33-150400.4.28.1fixed
Opensusephp7-fastcgileap 15.57.4.33-150400.4.28.1fixed
Opensusephp7-fpmleap 15.57.4.33-150400.4.28.1fixed
Opensusephp7-testleap 15.57.4.33-150400.4.28.1fixed
Susephp7linux enterprise high performance computing 15 sp2-ltss7.4.33-150200.3.60.1fixed
Susephp7linux enterprise high performance computing 15 sp3-espos7.4.33-150200.3.60.1fixed
Susephp7linux enterprise high performance computing 15 sp3-ltss7.4.33-150200.3.60.1fixed
Susephp7linux enterprise server 15 sp2-ltss7.4.33-150200.3.60.1fixed
Susephp7linux enterprise server 15 sp3-ltss7.4.33-150200.3.60.1fixed
Susephp7linux enterprise server for sap applications 15 sp27.4.33-150200.3.60.1fixed
Susephp7linux enterprise server for sap applications 15 sp37.4.33-150200.3.60.1fixed
Susephp7manager server 4.27.4.33-150200.3.60.1fixed
Susephp7enterprise storage 77.4.33-150200.3.60.1fixed
Susephp7enterprise storage 7.17.4.33-150200.3.60.1fixed
Opensusephp7leap 15.47.4.33-150200.3.60.1fixed
Suseapache2-mod_php8linux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Susephp8linux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Susephp8-embedlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Susephp8-fastcgilinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Susephp8-fpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Susephp8-testlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1fixed
Suseapache2-mod_php8linux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Susephp8linux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Susephp8-embedlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Susephp8-fastcgilinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Susephp8-fpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Susephp8-testlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1fixed
Opensuseapache2-mod_php8leap 15.48.0.30-150400.4.37.1fixed
Opensusephp8leap 15.48.0.30-150400.4.37.1fixed
Opensusephp8-embedleap 15.48.0.30-150400.4.37.1fixed
Opensusephp8-fastcgileap 15.48.0.30-150400.4.37.1fixed
Opensusephp8-fpmleap 15.48.0.30-150400.4.37.1fixed
Opensusephp8-testleap 15.48.0.30-150400.4.37.1fixed
Opensuseapache2-mod_php8leap 15.58.0.30-150400.4.37.1fixed
Opensusephp8leap 15.58.0.30-150400.4.37.1fixed
Opensusephp8-embedleap 15.58.0.30-150400.4.37.1fixed
Opensusephp8-fastcgileap 15.58.0.30-150400.4.37.1fixed
Opensusephp8-fpmleap 15.58.0.30-150400.4.37.1fixed
Opensusephp8-testleap 15.58.0.30-150400.4.37.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp8.2sourcebookworm8.2.18-1~deb12u1not yet assignedNot reported[1043477]
Ubuntuphp7.0debpro7.0.33-0ubuntu0.16.04.16+esm8Not reportedUSN-6305-2Not reported
Ubuntuphp7.2debpro7.2.24-0ubuntu0.18.04.17+esm2Not reportedUSN-6305-2Not reported
Ubuntuphp7.4deb20.047.4.3-4ubuntu2.20Not reportedUSN-6305-2Not reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.14Not reportedUSN-6305-1Not reported
Ubuntuphp7.0debpro7.0.33-0ubuntu0.16.04.16+esm10Not reportedUBUNTU-CVE-2023-3823Not reported
Ubuntuphp7.2debpro7.2.24-0ubuntu0.18.04.17+esm4Not reportedUBUNTU-CVE-2023-3823Not reported
Ubuntuphp7.4deb20.047.4.3-4ubuntu2.20Not reportedUBUNTU-CVE-2023-3823Not reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.14Not reportedUBUNTU-CVE-2023-3823Not reported
Susephp74rpmlinux enterprise module for web and scripting 127.4.33-1.62.1Not reportedSUSE-SU-2023:3445-1Not reported
Susephp74rpmlinux enterprise software development kit 12 sp57.4.33-1.62.1Not reportedSUSE-SU-2023:3445-1Not reported
Suseapache2-mod_php7rpmlinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7rpmlinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-fastcgirpmlinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-fpmrpmlinux enterprise module for legacy 15 sp47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Suseapache2-mod_php7rpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7rpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-fastcgirpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-fpmrpmlinux enterprise module for legacy 15 sp57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-embedrpmlinux enterprise module for package hub 15 sp47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7-embedrpmlinux enterprise module for package hub 15 sp57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensuseapache2-mod_php7rpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7rpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-embedrpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-fastcgirpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-fpmrpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-testrpmleap 15.47.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensuseapache2-mod_php7rpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7rpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-embedrpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-fastcgirpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-fpmrpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Opensusephp7-testrpmleap 15.57.4.33-150400.4.28.1Not reportedSUSE-SU-2023:3541-1Not reported
Susephp7rpmlinux enterprise high performance computing 15 sp2-ltss7.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise high performance computing 15 sp3-espos7.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise high performance computing 15 sp3-ltss7.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise server 15 sp2-ltss7.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise server 15 sp3-ltss7.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise server for sap applications 15 sp27.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmlinux enterprise server for sap applications 15 sp37.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmmanager server 4.27.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmenterprise storage 77.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Susephp7rpmenterprise storage 7.17.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Opensusephp7rpmleap 15.47.4.33-150200.3.60.1Not reportedSUSE-SU-2023:3498-1Not reported
Suseapache2-mod_php8rpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8rpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-embedrpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-fastcgirpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-fpmrpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-testrpmlinux enterprise module for web and scripting 15 sp48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Suseapache2-mod_php8rpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8rpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-embedrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-fastcgirpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-fpmrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Susephp8-testrpmlinux enterprise module for web and scripting 15 sp58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensuseapache2-mod_php8rpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8rpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-embedrpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-fastcgirpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-fpmrpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-testrpmleap 15.48.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensuseapache2-mod_php8rpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8rpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-embedrpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-fastcgirpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-fpmrpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported
Opensusephp8-testrpmleap 15.58.0.30-150400.4.37.1Not reportedSUSE-SU-2023:3528-1Not reported

[Debian bug #1043477]

Notes

[bookworm] php8.2: Fix along in future update

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References