Vulnerability CVE-2019-9022

Vulnerability Name:

CVE-2019-9022 (CCN-157969)

Assigned:

2018-12-29

Published:

2018-12-29

Updated:

2019-06-18

Summary:

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
6.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
6.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

4.6 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L)
4.2 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-125
CWE-119

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2019-9022

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1572

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2019:1573

Source: REDHAT
Type: UNKNOWN
RHSA-2019:2519

Source: REDHAT
Type: UNKNOWN
RHSA-2019:3299

Source: CCN
Type: PHP Sec Bug #77369
memcpy with negative length via crafted DNS response

Source: MISC
Type: Exploit, Issue Tracking, Vendor Advisory
https://bugs.php.net/bug.php?id=77369

Source: XF
Type: UNKNOWN
php-cve20199022-info-disc(157969)

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20190331 [SECURITY] [DLA 1741-1] php5 security update

Source: CONFIRM
Type: Third Party Advisory
https://security.netapp.com/advisory/ntap-20190321-0001/

Source: UBUNTU
Type: Third Party Advisory
USN-3902-1

Source: UBUNTU
Type: Third Party Advisory
USN-3922-2

Source: UBUNTU
Type: Third Party Advisory
USN-3922-3

Source: DEBIAN
Type: Third Party Advisory
DSA-4398

Source: CCN
Type: IBM Security Bulletin 3143907 (API Connect)
API Connect's Developer Portal is impacted by vulnerabilities in PHP

Source: CONFIRM
Type: UNKNOWN
https://www.tenable.com/security/tns-2019-07

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2019-9022

Vulnerable Configuration:

Configuration 1:

cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.0.0 and < 7.1.26)

OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.2.0 and < 7.2.14)

OR cpe:/a:php:php:*:*:*:*:*:*:*:* (Version >= 7.3.0 and < 7.3.2)

Configuration 2:

cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

OR cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Configuration 4:

cpe:/a:netapp:storage_automation_store:-:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

Configuration CCN 1:

cpe:/a:php:php:7.1.25:-:*:*:*:*:*:*

AND

cpe:/a:ibm:api_connect:2018.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:api_connect:2018.4.1.9:ifix1:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20199022	V	CVE-2019-9022	2023-06-22
oval:org.opensuse.security:def:8075	P	apache2-mod_php7-7.4.33-150400.4.22.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:51978	P	Security update for vim (Important)	2022-12-28
oval:org.opensuse.security:def:51944	P	Security update for podman (Moderate)	2022-10-31
oval:org.opensuse.security:def:639	P	Security update for grafana (Important) (in QA)	2022-10-06
oval:org.opensuse.security:def:3663	P	Security update for java-17-openjdk (Important)	2022-08-03
oval:org.opensuse.security:def:4301	P	Security update for samba (Important)	2022-07-29
oval:org.opensuse.security:def:3770	P	Security update for libguestfs (Moderate)	2022-07-28
oval:org.opensuse.security:def:3744	P	Security update for java-11-openjdk (Important) (in QA)	2022-07-22
oval:org.opensuse.security:def:94257	P	(Important)	2022-07-11
oval:org.opensuse.security:def:3680	P	Security update for MozillaFirefox (Important)	2022-07-06
oval:org.opensuse.security:def:3717	P	Security update for php7 (Important)	2022-07-06
oval:org.opensuse.security:def:3669	P	libruby2_1-2_1-2.1.9-18.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3756	P	ppc64-diag-2.7.5-2.30 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3197	P	libjson-c2-0.11-2.15 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3826	P	xinetd-2.3.15-8.8.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3434	P	apache2-mod_perl-2.0.8-11.43 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3209	P	libmms0-0.6.2-15.8 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3540	P	krb5-1.12.5-40.37.7 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95064	P	apache2-mod_php7-7.4.25-150400.2.8 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95170	P	apache2-mod_php8-8.0.10-150400.2.8 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:4294	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:1687	P	Security update for wireshark (Moderate)	2022-02-14
oval:org.opensuse.security:def:4304	P	Security update for the Linux Kernel (Critical)	2022-02-10
oval:org.opensuse.security:def:113132	P	php7-7.4.24-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:113137	P	php8-8.0.11-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:10711	P	Security update for MozillaThunderbird (Important)	2022-01-12
oval:org.opensuse.security:def:4528	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:4172	P	Security update for MozillaFirefox (Important)	2021-12-10
oval:org.opensuse.security:def:4512	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP5) (Important)	2021-11-17
oval:org.opensuse.security:def:51681	P	Security update for util-linux (Moderate)	2021-10-19
oval:org.opensuse.security:def:4160	P	Security update for libqt5-qtsvg (Moderate)	2021-10-12
oval:org.opensuse.security:def:106565	P	php7-7.4.24-1.1 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:106567	P	php8-8.0.11-1.1 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:66926	P	Security update for xen (Moderate)	2021-09-18
oval:org.opensuse.security:def:51642	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-08-25
oval:org.opensuse.security:def:70282	P	Security update for openssl-1_0_0 (Important)	2021-08-24
oval:org.opensuse.security:def:2325	P	apache2-mod_php7-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101415	P	apache2-mod_php7-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63414	P	apache2-mod_php7-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:107671	P	php7-embed-7.4.6-1.11 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:94292	P	php7-embed-7.4.6-1.11 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2359	P	php7-embed-7.4.6-1.11 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63448	P	php7-embed-7.4.6-1.11 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63360	P	openslp-server-2.0.0-6.15.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2418	P	php7-embed-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:63507	P	php7-embed-7.4.6-3.17.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101005	P	php7-embed-7.4.6-1.11 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62996	P	build-20210120-3.6.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62315	P	radvd-2.17-3.18 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62338	P	tcpdump-4.9.2-3.15.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:100970	P	libseccomp-devel-2.4.1-3.3.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62794	P	libkpathsea6-6.2.3-19.4 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62314	P	qemu-tools-5.2.0-9.18 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:51619	P	Security update for the Linux Kernel (Important)	2021-07-22
oval:org.opensuse.security:def:10686	P	Security update for the Linux Kernel (Important)	2021-07-20
oval:org.opensuse.security:def:66834	P	Security update for jetty-minimal (Important)	2021-06-17
oval:org.opensuse.security:def:11413	P	libvte9-0.28.2-17.83 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:2468	P	libwpd-0_10-10-0.10.2-1.28 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11435	P	perl-32bit-5.18.2-3.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:51580	P	Security update for libX11 (Important)	2021-06-08
oval:org.opensuse.security:def:2472	P	transfig-3.2.6a-2.86 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:4129	P	Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (Important)	2021-06-01
oval:org.opensuse.security:def:73617	P	Security update for the Linux Kernel (Important)	2021-05-12
oval:org.opensuse.security:def:51544	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-04-28
oval:org.opensuse.security:def:4269	P	Security update for the Linux Kernel (Important)	2021-04-15
oval:org.opensuse.security:def:51872	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:51138	P	Security update for fwupdate (Important)	2021-04-09
oval:org.opensuse.security:def:4188	P	Security update for MozillaFirefox (Important)	2021-03-29
oval:org.opensuse.security:def:70177	P	Security update for flac (Moderate)	2020-12-24
oval:org.opensuse.security:def:4968	P	Security update for PackageKit (Low)	2020-12-22
oval:org.opensuse.security:def:4066	P	libtirpc-devel-1.0.1-17.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3874	P	dbus-1-glib-devel-0.100.2-3.58 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2478	P	argyllcms-1.9.2-2.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2519	P	argyllcms-1.9.2-2.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63134	P	clamsap-0.99.25-2.37 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48985	P	freerdp-2.0.0~git.1463131968.4e66df7-12.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2490	P	gstreamer-plugins-ugly-1.12.5-1.35 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2543	P	libproxy1-config-gnome3-0.4.15-2.42 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4074	P	libvorbis-devel-1.3.3-10.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48986	P	gcc48-gij-32bit-4.8.5-31.20.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16949	P	php72-devel-7.2.5-1.26.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62515	P	fetchmailconf-6.3.26-3.27 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2504	P	libreoffice-6.1.3.2-6.28 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2549	P	libvncclient0-0.9.10-4.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4087	P	libzypp-devel-16.20.0-2.39.4 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:49004	P	libIlmImf-Imf_2_1-21-32bit-2.1.0-6.13.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2317	P	apache2-mod_php7-7.4.6-1.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3870	P	crash-devel-7.2.1-6.42 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:117194	P	apache2-mod_php7-7.4.6-1.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3867	P	cifs-utils-devel-6.9-9.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:2510	P	pidgin-plugin-otr-4.0.2-1.61 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3864	P	build-20190128-9.6.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63406	P	apache2-mod_php7-7.4.6-1.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3843	P	LibVNCServer-devel-0.9.9-17.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107636	P	apache2-mod_php7-7.4.6-1.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4946	P	Security update for virt-bootstrap (Moderate)	2020-12-02
oval:org.opensuse.security:def:4308	P	Security update for the Linux Kernel (Live Patch 8 for SLE 15) (Important)	2020-12-02
oval:org.opensuse.security:def:2557	P	Security update for xen (Important)	2020-12-02
oval:org.opensuse.security:def:2559	P	Security update for spice-gtk (Moderate)	2020-12-02
oval:org.opensuse.security:def:4249	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15) (Important)	2020-12-02
oval:org.opensuse.security:def:50584	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:51785	P	Security update for python-azure-agent (Moderate)	2020-12-01
oval:org.opensuse.security:def:63821	P	Security update for libseccomp (Moderate)	2020-12-01
oval:org.opensuse.security:def:10530	P	libpng12-compat-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:74249	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52053	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:10454	P	icecream on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49336	P	subversion on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49975	P	rsyslog-module-gssapi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64183	P	Security update for mariadb (Moderate)	2020-12-01
oval:org.opensuse.security:def:50333	P	Security update for libarchive (Moderate)	2020-12-01
oval:org.opensuse.security:def:50988	P	Security update for hunspell (Low)	2020-12-01
oval:org.opensuse.security:def:64071	P	Security update for shim (Moderate)	2020-12-01
oval:org.opensuse.security:def:50606	P	Security update for cronie (Low)	2020-12-01
oval:org.opensuse.security:def:51242	P	Security update for djvulibre (Moderate)	2020-12-01
oval:org.opensuse.security:def:64029	P	Security update for libpng12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53329	P	Security update for rmt-server (Important)	2020-12-01
oval:org.opensuse.security:def:63927	P	Security update for python-PyYAML (Important)	2020-12-01
oval:org.opensuse.security:def:10577	P	ocaml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50231	P	icedtea-web on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52959	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50200	P	libpskc-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50135	P	NetworkManager-applet on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50074	P	libosinfo-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49482	P	perl-Tk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50065	P	libapr-util1-dbd-mysql on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:74123	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:50563	P	Security update for libqt5-qtbase (Moderate)	2020-12-01
oval:org.opensuse.security:def:51258	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:10775	P	libpng12-compat-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50740	P	Security update for file (Moderate)	2020-12-01
oval:org.opensuse.security:def:51406	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:10762	P	libmysqlclient-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10753	P	libksba-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10462	P	libHX-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10592	P	quagga-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50180	P	colord on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50304	P	Security update for webkit2gtk3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:53399	P	Security update for php7 (Moderate)	2020-12-01
oval:org.opensuse.security:def:51510	P	Security update for the Linux Kernel (Critical)	2020-12-01
oval:org.opensuse.security:def:49580	P	libthai-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51442	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:50181	P	dia on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50722	P	Security update for trousers (Moderate)	2020-12-01
oval:org.opensuse.security:def:51359	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:73499	P	gdb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50975	P	Security update for bcm43xx-firmware (Moderate)	2020-12-01
oval:org.opensuse.security:def:63687	P	Security update for nmap (Moderate)	2020-12-01
oval:org.opensuse.security:def:50128	P	apache2-mod_php7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10484	P	libarchive-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10611	P	xfsprogs-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50583	P	Security update for systemd (Important)	2020-12-01
oval:org.opensuse.security:def:49131	P	ldns-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49737	P	git on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50201	P	libpurple on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:50826	P	Security update for python-pip (Moderate)	2020-12-01
oval:org.opensuse.security:def:52895	P	Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)	2020-12-01
oval:com.redhat.rhsa:def:20201624	P	RHSA-2020:1624: php:7.2 security, bug fix, and enhancement update (Moderate)	2020-04-28
oval:org.opensuse.security:def:109873	P	Security update for php7 (Moderate)	2019-06-18
oval:com.ubuntu.bionic:def:20199022000	V	CVE-2019-9022 on Ubuntu 18.04 LTS (bionic) - medium.	2019-02-22
oval:com.ubuntu.cosmic:def:201990220000000	V	CVE-2019-9022 on Ubuntu 18.10 (cosmic) - medium.	2019-02-22
oval:com.ubuntu.disco:def:201990220000000	V	CVE-2019-9022 on Ubuntu 19.04 (disco) - medium.	2019-02-22
oval:com.ubuntu.cosmic:def:20199022000	V	CVE-2019-9022 on Ubuntu 18.10 (cosmic) - medium.	2019-02-22
oval:com.ubuntu.bionic:def:201990220000000	V	CVE-2019-9022 on Ubuntu 18.04 LTS (bionic) - medium.	2019-02-22
oval:com.ubuntu.trusty:def:20199022000	V	CVE-2019-9022 on Ubuntu 14.04 LTS (trusty) - medium.	2019-02-22
oval:com.ubuntu.xenial:def:201990220000000	V	CVE-2019-9022 on Ubuntu 16.04 LTS (xenial) - medium.	2019-02-22
oval:com.ubuntu.xenial:def:20199022000	V	CVE-2019-9022 on Ubuntu 16.04 LTS (xenial) - medium.	2019-02-22

BACK