CVE-2019-11039 — Out-of-bounds read in iconv.c

Affected: PHP Group PHP

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

USN-4009-1 — php7.0, php7.2 vulnerabilities

Affected: Ubuntu:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2

It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2019-11036)

It was discovered that PHP incorrectly decoding certain MIME headers. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-11039)

Most recent entries from all

CVE-2019-11039 — Out-of-bounds read in iconv.c

USN-4009-1 — php7.0, php7.2 vulnerabilities