{"schemaVersion":3,"id":"USN-4583-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"php5, php7.0, php7.2, php7.4 vulnerabilities\n\nIt was discovered that PHP incorrectly handled certain encrypt ciphers.\nAn attacker could possibly use this issue to decrease security or cause\nincorrect encryption data. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS.  (CVE-2020-7069)\n\nIt was discorevered that PHP incorrectly handled certain HTTP cookies.\nAn attacker could possibly use this issue to forge cookie which is supposed to\nbe secure. (CVE-2020-7070)","dates":{"published":"2020-10-14T17:42:17.000Z","modified":"2026-04-22T10:08:41.618Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"php5","name":"php5","label":"php5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php5","purlType":"deb","versions":[{"text":"< 5.5.9+dfsg-1ubuntu4.29+esm13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.5.9+dfsg-1ubuntu4.29+esm13","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.0","name":"php7.0","label":"php7.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.0","purlType":"deb","versions":[{"text":"< 7.0.33-0ubuntu0.16.04.16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.33-0ubuntu0.16.04.16","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.2","name":"php7.2","label":"php7.2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.2","purlType":"deb","versions":[{"text":"< 7.2.24-0ubuntu0.18.04.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.24-0ubuntu0.18.04.7","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"php7.4","name":"php7.4","label":"php7.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/php7.4","purlType":"deb","versions":[{"text":"< 7.4.3-4ubuntu2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.3-4ubuntu2.4","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4583-1","label":"ubuntu.com/security/notices/USN-4583-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-7069","label":"ubuntu.com/security/CVE-2020-7069","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-7070","label":"ubuntu.com/security/CVE-2020-7070","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-7069","CVE-2020-7070"],"downstream":[],"duplicates":[],"related":["CVE-2020-7069","CVE-2020-7070"]},"timeline":[{"kind":"published","date":"2020-10-14T17:42:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:08:41.618Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T19:59:37.223Z","stale":false,"partial":false}}