Lucene search
+L

2 matches found

OSV
OSV
added 2025/08/11 1:53 p.m.7 views

BIT-LIBPHP-2020-7069 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data...

6.5CVSS7.2AI score0.02055EPSS
SaveExploits0References14
OSV
OSV
added 2020/10/02 3:15 p.m.5 views

UBUNTU-CVE-2020-7069

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data...

6.5CVSS6.7AI score0.02055EPSS
SaveExploits0References6
Rows per page
Query Builder