CVE-2020-7069: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-02 · updated 2026-06-17
Weakness: CWE-20

Description

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 16.04, 18.04, 20.04
Debian Linux: 10.0
Fedoraproject Fedora: 31, 32, 33
Clustered Data ONTAP: all versions
openSUSE Leap: 15.1, 15.2
Oracle Corporation Communications Diameter Signaling Router (DSR): from 8.0.0 through 8.5.0
PHP: from 7.2.0 before 7.2.34; from 7.3.0 before 7.3.23; from 7.4.0 before 7.4.11 — fixed in 7.2.34, 7.3.23, 7.4.11
Tenable.sc: before 5.19.0 — fixed in 5.19.0

How to fix

Upgrade to a fixed version: PHP 7.2.34, 7.3.23, 7.4.11; Tenable.sc 5.19.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-7069 or the next vulnerability affects your stack