CyberzSOC

Applicability
← Back to CVE-2024-4577

CVE-2024-4577

In CISA KEV PHP Group

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2025-11-21
299 not affected
OSV.dev (incl. GHSA)
precedence 80 · revised 2026-09-08
12 affected 12 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2025-10-21
3 affected
CVE List v5 (ADP/Vulnrichment)
precedence 55 · revised 2025-10-21
3 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (329)

Product Status Versions Remediation Source
red_hat_enterprise_linux_8:apcu-panel::php:7.4 apcu-panel (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present apcu-panel::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:apcu-panel::php:8.0 apcu-panel (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present apcu-panel::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_8:apcu-panel::php:8.2 apcu-panel (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present apcu-panel::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip::php:7.4 libzip (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip::php:8.0 libzip (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip::php:8.2 libzip (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-devel::php:7.4 libzip-devel (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-devel::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-devel::php:8.0 libzip-devel (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-devel::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-devel::php:8.2 libzip-devel (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-devel::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-tools::php:7.4 libzip-tools (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-tools::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-tools::php:8.0 libzip-tools (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-tools::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip-tools::php:8.2 libzip-tools (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip-tools::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip.src::php:7.4 libzip.src (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip.src::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip.src::php:8.0 libzip.src (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip.src::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_8:libzip.src::php:8.2 libzip.src (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present libzip.src::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_8:php::php:7.4 php (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:php::php:8.0 php (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_9:php::php:8.1 php (php:8.1) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php::php:8.1 not applicable csaf_redhat
red_hat_enterprise_linux_8:php::php:8.2 php (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_9:php::php:8.2 php (php:8.2) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_10:php php as a component of Red Hat Enterprise Linux 10 not affected vulnerable code not present no version stated vendor label: php not applicable csaf_redhat
red_hat_enterprise_linux_6:php php as a component of Red Hat Enterprise Linux 6 not affected vulnerable code not present no version stated vendor label: php not applicable csaf_redhat
red_hat_enterprise_linux_7:php php as a component of Red Hat Enterprise Linux 7 not affected vulnerable code not present no version stated vendor label: php not applicable csaf_redhat
red_hat_enterprise_linux_9:php php as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present no version stated vendor label: php not applicable csaf_redhat
red_hat_enterprise_linux_8:php-bcmath::php:7.4 php-bcmath (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-bcmath::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-bcmath::php:8.0 php-bcmath (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-bcmath::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-bcmath::php:8.1 php-bcmath (php:8.1) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-bcmath::php:8.1 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-bcmath::php:8.2 php-bcmath (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-bcmath::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-bcmath::php:8.2 php-bcmath (php:8.2) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-bcmath::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_10:php-bcmath php-bcmath as a component of Red Hat Enterprise Linux 10 not affected vulnerable code not present no version stated vendor label: php-bcmath not applicable csaf_redhat
red_hat_enterprise_linux_6:php-bcmath php-bcmath as a component of Red Hat Enterprise Linux 6 not affected vulnerable code not present no version stated vendor label: php-bcmath not applicable csaf_redhat
red_hat_enterprise_linux_7:php-bcmath php-bcmath as a component of Red Hat Enterprise Linux 7 not affected vulnerable code not present no version stated vendor label: php-bcmath not applicable csaf_redhat
red_hat_enterprise_linux_9:php-bcmath php-bcmath as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present no version stated vendor label: php-bcmath not applicable csaf_redhat
red_hat_enterprise_linux_8:php-cli::php:7.4 php-cli (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-cli::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-cli::php:8.0 php-cli (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-cli::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-cli::php:8.1 php-cli (php:8.1) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-cli::php:8.1 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-cli::php:8.2 php-cli (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-cli::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-cli::php:8.2 php-cli (php:8.2) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-cli::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_10:php-cli php-cli as a component of Red Hat Enterprise Linux 10 not affected vulnerable code not present no version stated vendor label: php-cli not applicable csaf_redhat
red_hat_enterprise_linux_6:php-cli php-cli as a component of Red Hat Enterprise Linux 6 not affected vulnerable code not present no version stated vendor label: php-cli not applicable csaf_redhat
red_hat_enterprise_linux_7:php-cli php-cli as a component of Red Hat Enterprise Linux 7 not affected vulnerable code not present no version stated vendor label: php-cli not applicable csaf_redhat
red_hat_enterprise_linux_9:php-cli php-cli as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present no version stated vendor label: php-cli not applicable csaf_redhat
red_hat_enterprise_linux_8:php-common::php:7.4 php-common (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-common::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-common::php:8.0 php-common (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-common::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-common::php:8.1 php-common (php:8.1) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-common::php:8.1 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-common::php:8.2 php-common (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-common::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-common::php:8.2 php-common (php:8.2) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-common::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_10:php-common php-common as a component of Red Hat Enterprise Linux 10 not affected vulnerable code not present no version stated vendor label: php-common not applicable csaf_redhat
red_hat_enterprise_linux_6:php-common php-common as a component of Red Hat Enterprise Linux 6 not affected vulnerable code not present no version stated vendor label: php-common not applicable csaf_redhat
red_hat_enterprise_linux_7:php-common php-common as a component of Red Hat Enterprise Linux 7 not affected vulnerable code not present no version stated vendor label: php-common not applicable csaf_redhat
red_hat_enterprise_linux_9:php-common php-common as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present no version stated vendor label: php-common not applicable csaf_redhat
red_hat_enterprise_linux_8:php-dba::php:7.4 php-dba (php:7.4) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-dba::php:7.4 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-dba::php:8.0 php-dba (php:8.0) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-dba::php:8.0 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-dba::php:8.1 php-dba (php:8.1) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-dba::php:8.1 not applicable csaf_redhat
red_hat_enterprise_linux_8:php-dba::php:8.2 php-dba (php:8.2) as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present php-dba::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_9:php-dba::php:8.2 php-dba (php:8.2) as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present php-dba::php:8.2 not applicable csaf_redhat
red_hat_enterprise_linux_10:php-dba php-dba as a component of Red Hat Enterprise Linux 10 not affected vulnerable code not present no version stated vendor label: php-dba not applicable csaf_redhat
red_hat_enterprise_linux_6:php-dba php-dba as a component of Red Hat Enterprise Linux 6 not affected vulnerable code not present no version stated vendor label: php-dba not applicable csaf_redhat
red_hat_enterprise_linux_7:php-dba php-dba as a component of Red Hat Enterprise Linux 7 not affected vulnerable code not present no version stated vendor label: php-dba not applicable csaf_redhat
red_hat_enterprise_linux_9:php-dba php-dba as a component of Red Hat Enterprise Linux 9 not affected vulnerable code not present no version stated vendor label: php-dba not applicable csaf_redhat
page 1 of 6 next →

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.