CVE.RADIO
FREN

CVE-2019-11047

php7VulnerabilityPatched

No public exploitation has been reported so far. A fixed version is available (see the table below).

Recommended action: Update to the fixed version listed for your distribution using the native package manager.

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

DistributionPackageAffectedFixed versionStatus
SUSE:Linux Enterprise Module for Package Hub 15php7-7.2.5-4.49.1fixed
SUSE:Linux Enterprise Module for Web and Scripting 15php7-7.2.5-4.49.1fixed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP1php7-7.2.5-4.49.1fixed
SUSE:Linux Enterprise Module for Web and Scripting 12php7-7.0.7-50.91.1fixed
SUSE:Linux Enterprise Software Development Kit 12 SP4php7-7.0.7-50.91.1fixed
SUSE:Linux Enterprise Software Development Kit 12 SP5php7-7.0.7-50.91.1fixed
SUSE:Linux Enterprise High Performance Computing 15-ESPOSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise High Performance Computing 15-LTSSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise Server 15-LTSSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise Server 15 SP1-BCLphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise Server 15 SP1-LTSSphp7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise Server for SAP Applications 15php7-7.2.34-150000.4.103.1fixed
SUSE:Linux Enterprise Server for SAP Applications 15 SP1php7-7.2.34-150000.4.103.1fixed
SUSE:Enterprise Storage 6php7-7.2.34-150000.4.103.1fixed
openSUSE:Leap 15.4php7-7.2.34-150000.4.103.1fixed
openSUSE:Leap 15.1php7-7.2.5-lp151.6.19.2fixed
Red Hat:enterprise_linux:8::appstreamphp-0:7.3.20-1.module+el8.2.0+7373+b272fdeffixed

Sources