Vulnerability-Lookup

RHSA-2020:3662

Vulnerability from csaf_redhat - Published: 2020-09-08 10:06 - Updated: 2026-08-17 16:32

Summary

Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for the php:7.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655) Security Fix(es): * php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039) * php: Buffer over-read in exif_read_data() (CVE-2019-11040) * php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte (CVE-2019-11045) * php: Information disclosure in exif_read_data() (CVE-2019-11047) * php: Integer wraparounds when receiving multipart forms (CVE-2019-11048) * oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224) * oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225) * oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163) * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203) * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204) * pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454) * php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059) * php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060) * php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062) * php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063) * php: Information disclosure in exif_read_data() function (CVE-2020-7064) * php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065) * php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041) * php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042) * php: Out of bounds read when parsing EXIF information (CVE-2019-11050) * oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246) * php: Information disclosure in function get_headers (CVE-2020-7066) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2019-11039

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 301 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:apcu-panel-0:5.1.17-1.module+el8.1.0+3189+a1bff096.noarch::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debugsource-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debugsource-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debugsource-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-debugsource-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-devel-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-devel-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-devel-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-devel-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:libzip-tools-debuginfo-0:1.5.2-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-0:7.3.20-1.module+el8.2.0+7373+b272fdef.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-bcmath-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-cli-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-common-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dba-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-dbg-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debugsource-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debugsource-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debugsource-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-debugsource-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-devel-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-devel-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-devel-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-devel-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-embedded-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-enchant-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-fpm-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-gmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-intl-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-json-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-ldap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mbstring-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-mysqlnd-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-odbc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-opcache-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pdo-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pear-1:1.10.9-1.module+el8.1.0+3189+a1bff096.noarch::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pear-1:1.10.9-1.module+el8.1.0+3189+a1bff096.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-0:5.1.17-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-devel-0:5.1.17-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-devel-0:5.1.17-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-devel-0:5.1.17-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-apcu-devel-0:5.1.17-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-0:2.0.1-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debuginfo-0:2.0.1-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-rrd-debugsource-0:2.0.1-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-0:2.8.0-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debuginfo-0:2.8.0-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.2.0+4968+1d5097db.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.2.0+4968+1d5097db.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.2.0+4968+1d5097db.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-xdebug-debugsource-0:2.8.0-1.module+el8.2.0+4968+1d5097db.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096.src::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-0:1.15.4-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debugsource-0:1.15.4-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debugsource-0:1.15.4-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debugsource-0:1.15.4-1.module+el8.1.0+3189+a1bff096.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pecl-zip-debugsource-0:1.15.4-1.module+el8.1.0+3189+a1bff096.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-pgsql-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-process-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-recode-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-snmp-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-soap-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xml-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.aarch64::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.ppc64le::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.s390x::php:7.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:php-xmlrpc-debuginfo-0:7.3.20-1.module+el8.2.0+7373+b272fdef.x86_64::php:7.3	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2019-11040

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-11041

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Low

CVE-2019-11042

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Low

CVE-2019-11045

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-170 - Improper Null Termination

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-11047

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-11048

A flaw was found in PHP under a non-default configuration, where it was vulnerable to integer wraparounds during the reception of a multipart POST request. This flaw allows a remote attacker to repeatedly crash PHP and fill the filesystem with temporary PHP files, resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-11050

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Low

CVE-2019-13224

A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

6.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-13225

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-16163

Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-19203

An out-of-bounds read vulnerability was found in the way Oniguruma handled regular expressions with GB18030 character encoding. A UChar pointer is dereferenced without checking if it passed the end of the matched string, leading to a heap-based buffer over-read. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, might crash the application causing a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-19204

An out-of-bounds read vulnerability was found in Oniguruma in the way it handled regular expression quantifiers. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, could possibly crash the application, resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-19246

A vulnerability was found in Oniguruma, where improper bounds checking in str_lower_case_match within regexec.c can cause a heap-based buffer overflow, a remote attacker could exploit this flaw to crash the application or, in certain scenarios, execute arbitrary code. This occurs when the application processes specially crafted regex patterns, potentially leading to unintended behavior.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2019-20454

An out-of-bounds read was discovered in PCRE when the pattern "\X" is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to crash the application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7062

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7063

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-284 - Improper Access Control

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7064

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7065

A vulnerability was found in PHP while using the mb_strtolower() function with UTF-32LE encoding, where certain invalid strings cause PHP to overwrite the stack-allocated buffer. This flaw leads to memory corruption, crashes, and potential code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Moderate

CVE-2020-7066

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 301 products, the same list as for CVE-2019-11039

Threats

Impact Low

References

117 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:3662	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1724152	external
https://bugzilla.redhat.com/show_bug.cgi?id=1724154	external
https://bugzilla.redhat.com/show_bug.cgi?id=1728965	external
https://bugzilla.redhat.com/show_bug.cgi?id=1728970	external
https://bugzilla.redhat.com/show_bug.cgi?id=1735494	external
https://bugzilla.redhat.com/show_bug.cgi?id=1739459	external
https://bugzilla.redhat.com/show_bug.cgi?id=1739465	external
https://bugzilla.redhat.com/show_bug.cgi?id=1768997	external
https://bugzilla.redhat.com/show_bug.cgi?id=1777537	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786570	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786572	external
https://bugzilla.redhat.com/show_bug.cgi?id=1788258	external
https://bugzilla.redhat.com/show_bug.cgi?id=1797776	external
https://bugzilla.redhat.com/show_bug.cgi?id=1797779	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802061	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802068	external
https://bugzilla.redhat.com/show_bug.cgi?id=1808532	external
https://bugzilla.redhat.com/show_bug.cgi?id=1808536	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820601	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820604	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820627	external
https://bugzilla.redhat.com/show_bug.cgi?id=1837842	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2019-11039	self
https://bugzilla.redhat.com/show_bug.cgi?id=1724152	external
https://www.cve.org/CVERecord?id=CVE-2019-11039	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11039	external
https://access.redhat.com/security/cve/CVE-2019-11040	self
https://bugzilla.redhat.com/show_bug.cgi?id=1724154	external
https://www.cve.org/CVERecord?id=CVE-2019-11040	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11040	external
https://access.redhat.com/security/cve/CVE-2019-11041	self
https://bugzilla.redhat.com/show_bug.cgi?id=1739459	external
https://www.cve.org/CVERecord?id=CVE-2019-11041	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11041	external
https://access.redhat.com/security/cve/CVE-2019-11042	self
https://bugzilla.redhat.com/show_bug.cgi?id=1739465	external
https://www.cve.org/CVERecord?id=CVE-2019-11042	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11042	external
https://access.redhat.com/security/cve/CVE-2019-11045	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786572	external
https://www.cve.org/CVERecord?id=CVE-2019-11045	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11045	external
https://access.redhat.com/security/cve/CVE-2019-11047	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786570	external
https://www.cve.org/CVERecord?id=CVE-2019-11047	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11047	external
https://access.redhat.com/security/cve/CVE-2019-11048	self
https://bugzilla.redhat.com/show_bug.cgi?id=1837842	external
https://www.cve.org/CVERecord?id=CVE-2019-11048	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11048	external
https://access.redhat.com/security/cve/CVE-2019-11050	self
https://bugzilla.redhat.com/show_bug.cgi?id=1788258	external
https://www.cve.org/CVERecord?id=CVE-2019-11050	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11050	external
https://access.redhat.com/security/cve/CVE-2019-13224	self
https://bugzilla.redhat.com/show_bug.cgi?id=1728970	external
https://www.cve.org/CVERecord?id=CVE-2019-13224	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13224	external
https://access.redhat.com/security/cve/CVE-2019-13225	self
https://bugzilla.redhat.com/show_bug.cgi?id=1728965	external
https://www.cve.org/CVERecord?id=CVE-2019-13225	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13225	external
https://access.redhat.com/security/cve/CVE-2019-16163	self
https://bugzilla.redhat.com/show_bug.cgi?id=1768997	external
https://www.cve.org/CVERecord?id=CVE-2019-16163	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16163	external
https://access.redhat.com/security/cve/CVE-2019-19203	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802061	external
https://www.cve.org/CVERecord?id=CVE-2019-19203	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19203	external
https://access.redhat.com/security/cve/CVE-2019-19204	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802068	external
https://www.cve.org/CVERecord?id=CVE-2019-19204	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19204	external
https://access.redhat.com/security/cve/CVE-2019-19246	self
https://bugzilla.redhat.com/show_bug.cgi?id=1777537	external
https://www.cve.org/CVERecord?id=CVE-2019-19246	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19246	external
https://access.redhat.com/security/cve/CVE-2019-20454	self
https://bugzilla.redhat.com/show_bug.cgi?id=1735494	external
https://www.cve.org/CVERecord?id=CVE-2019-20454	external
https://nvd.nist.gov/vuln/detail/CVE-2019-20454	external
https://access.redhat.com/security/cve/CVE-2020-7059	self
https://bugzilla.redhat.com/show_bug.cgi?id=1797776	external
https://www.cve.org/CVERecord?id=CVE-2020-7059	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7059	external
https://access.redhat.com/security/cve/CVE-2020-7060	self
https://bugzilla.redhat.com/show_bug.cgi?id=1797779	external
https://www.cve.org/CVERecord?id=CVE-2020-7060	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7060	external
https://access.redhat.com/security/cve/CVE-2020-7062	self
https://bugzilla.redhat.com/show_bug.cgi?id=1808532	external
https://www.cve.org/CVERecord?id=CVE-2020-7062	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7062	external
https://access.redhat.com/security/cve/CVE-2020-7063	self
https://bugzilla.redhat.com/show_bug.cgi?id=1808536	external
https://www.cve.org/CVERecord?id=CVE-2020-7063	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7063	external
https://access.redhat.com/security/cve/CVE-2020-7064	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820601	external
https://www.cve.org/CVERecord?id=CVE-2020-7064	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7064	external
https://bugs.php.net/bug.php?id=79282	external
https://access.redhat.com/security/cve/CVE-2020-7065	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820627	external
https://www.cve.org/CVERecord?id=CVE-2020-7065	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7065	external
https://www.php.net/ChangeLog-7.php#PHP_7_3	external
https://www.php.net/ChangeLog-7.php#PHP_7_4	external
https://access.redhat.com/security/cve/CVE-2020-7066	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820604	external
https://www.cve.org/CVERecord?id=CVE-2020-7066	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7066	external
https://bugs.php.net/bug.php?id=79329	external

JSON

To clipboard

Loading 2.6 MB of JSON…

CVE-2019-11039 (GCVE-0-2019-11039)

Vulnerability from cvelistv5 – Published: 2019-06-18 23:28 – Updated: 2024-09-17 00:21

Title

Out-of-bounds read in iconv.c

Summary

Severity

4.2 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

8 references

URL	Tags
https://bugs.php.net/bug.php?id=78069	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2519	vendor-advisoryx_refsource_REDHAT
https://seclists.org/bugtraq/2019/Sep/35	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4527	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2019/dsa-4529	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Sep/38	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:3299	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.1.30 Affected: 7.2.19 Affected: 7.3.6

Date Public

2019-05-28 00:00

Credits

By maris dot adam at gmail dot com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.019Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78069"
          },
          {
            "name": "openSUSE-SU-2019:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
          },
          {
            "name": "RHSA-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2519"
          },
          {
            "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/35"
          },
          {
            "name": "DSA-4527",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4527"
          },
          {
            "name": "DSA-4529",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4529"
          },
          {
            "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/38"
          },
          {
            "name": "RHSA-2019:3299",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3299"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.30"
            },
            {
              "status": "affected",
              "version": "7.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "By maris dot adam at gmail dot com"
        }
      ],
      "datePublic": "2019-05-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-01T15:06:18.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=78069"
        },
        {
          "name": "openSUSE-SU-2019:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
        },
        {
          "name": "RHSA-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2519"
        },
        {
          "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/35"
        },
        {
          "name": "DSA-4527",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4527"
        },
        {
          "name": "DSA-4529",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4529"
        },
        {
          "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/38"
        },
        {
          "name": "RHSA-2019:3299",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3299"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78069"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds read in iconv.c",
      "x_generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-05-28T06:49:00.000Z",
          "ID": "CVE-2019-11039",
          "STATE": "PUBLIC",
          "TITLE": "Out-of-bounds read in iconv.c"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1.30"
                          },
                          {
                            "version_value": "7.2.19"
                          },
                          {
                            "version_value": "7.3.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "By maris dot adam at gmail dot com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash."
            }
          ]
        },
        "exploit": [],
        "generator": {
          "engine": "Vulnogram 0.0.7"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78069",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=78069"
            },
            {
              "name": "openSUSE-SU-2019:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
            },
            {
              "name": "RHSA-2019:2519",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2519"
            },
            {
              "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/35"
            },
            {
              "name": "DSA-4527",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4527"
            },
            {
              "name": "DSA-4529",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4529"
            },
            {
              "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/38"
            },
            {
              "name": "RHSA-2019:3299",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3299"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "",
          "defect": [
            "https://bugs.php.net/bug.php?id=78069"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11039",
    "datePublished": "2019-06-18T23:28:28.280Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:21:46.316Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11040 (GCVE-0-2019-11040)

Vulnerability from cvelistv5 – Published: 2019-06-18 23:28 – Updated: 2024-09-16 17:23

Title

Heap buffer overflow in EXIF extension

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

8 references

URL	Tags
https://bugs.php.net/bug.php?id=77988	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2519	vendor-advisoryx_refsource_REDHAT
https://seclists.org/bugtraq/2019/Sep/35	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4527	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2019/dsa-4529	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Sep/38	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:3299	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.1.30 Affected: 7.2.19 Affected: 7.3.6

Date Public

2019-05-28 00:00

Credits

By orestiskourides at gmail dot com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.992Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=77988"
          },
          {
            "name": "openSUSE-SU-2019:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
          },
          {
            "name": "RHSA-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2519"
          },
          {
            "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/35"
          },
          {
            "name": "DSA-4527",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4527"
          },
          {
            "name": "DSA-4529",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4529"
          },
          {
            "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/38"
          },
          {
            "name": "RHSA-2019:3299",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3299"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.30"
            },
            {
              "status": "affected",
              "version": "7.2.19"
            },
            {
              "status": "affected",
              "version": "7.3.6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "By orestiskourides at gmail dot com"
        }
      ],
      "datePublic": "2019-05-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-01T15:06:33.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=77988"
        },
        {
          "name": "openSUSE-SU-2019:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
        },
        {
          "name": "RHSA-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2519"
        },
        {
          "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/35"
        },
        {
          "name": "DSA-4527",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4527"
        },
        {
          "name": "DSA-4529",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4529"
        },
        {
          "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/38"
        },
        {
          "name": "RHSA-2019:3299",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3299"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=77988"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Heap buffer overflow in EXIF extension",
      "x_generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-05-28T06:49:00.000Z",
          "ID": "CVE-2019-11040",
          "STATE": "PUBLIC",
          "TITLE": "Heap buffer overflow in EXIF extension"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1.30"
                          },
                          {
                            "version_value": "7.2.19"
                          },
                          {
                            "version_value": "7.3.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "By orestiskourides at gmail dot com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "exploit": [],
        "generator": {
          "engine": "Vulnogram 0.0.7"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=77988",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=77988"
            },
            {
              "name": "openSUSE-SU-2019:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00029.html"
            },
            {
              "name": "RHSA-2019:2519",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2519"
            },
            {
              "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/35"
            },
            {
              "name": "DSA-4527",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4527"
            },
            {
              "name": "DSA-4529",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4529"
            },
            {
              "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/38"
            },
            {
              "name": "RHSA-2019:3299",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3299"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "",
          "defect": [
            "https://bugs.php.net/bug.php?id=77988"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11040",
    "datePublished": "2019-06-18T23:28:28.320Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:23:01.910Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11041 (GCVE-0-2019-11041)

Vulnerability from cvelistv5 – Published: 2019-08-09 19:26 – Updated: 2024-09-16 19:31

Title

heap-buffer-overflow on exif_scan_thumbnail in EXIF extension

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

17 references

URL	Tags
https://bugs.php.net/bug.php?id=78222	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4097-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4097-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019082…	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Sep/35	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4527	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2019/dsa-4529	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Sep/38	mailing-listx_refsource_BUGTRAQ
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/kb/HT210634	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Oct/9	mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Oct/15	mailing-listx_refsource_FULLDISC
https://support.apple.com/kb/HT210722	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2019/Oct/55	mailing-listx_refsource_FULLDISC
https://access.redhat.com/errata/RHSA-2019:3299	vendor-advisoryx_refsource_REDHAT
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.1.x below 7.1.31 Affected: 7.2.x below 7.2.21 Affected: 7.3.x below 7.3.8

Date Public

2019-07-30 00:00

Credits

By orestiskourides at gmail dot com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.996Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78222"
          },
          {
            "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
          },
          {
            "name": "USN-4097-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4097-2/"
          },
          {
            "name": "USN-4097-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4097-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
          },
          {
            "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/35"
          },
          {
            "name": "DSA-4527",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4527"
          },
          {
            "name": "DSA-4529",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4529"
          },
          {
            "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/38"
          },
          {
            "name": "openSUSE-SU-2019:2271",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210634"
          },
          {
            "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Oct/9"
          },
          {
            "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210722"
          },
          {
            "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
          },
          {
            "name": "RHSA-2019:3299",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.x below 7.1.31"
            },
            {
              "status": "affected",
              "version": "7.2.x below 7.2.21"
            },
            {
              "status": "affected",
              "version": "7.3.x below 7.3.8"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "By orestiskourides at gmail dot com"
        }
      ],
      "datePublic": "2019-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:35.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=78222"
        },
        {
          "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
        },
        {
          "name": "USN-4097-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4097-2/"
        },
        {
          "name": "USN-4097-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4097-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
        },
        {
          "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/35"
        },
        {
          "name": "DSA-4527",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4527"
        },
        {
          "name": "DSA-4529",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4529"
        },
        {
          "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/38"
        },
        {
          "name": "openSUSE-SU-2019:2271",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210634"
        },
        {
          "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Oct/9"
        },
        {
          "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210722"
        },
        {
          "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
        },
        {
          "name": "RHSA-2019:3299",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78222"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "heap-buffer-overflow on exif_scan_thumbnail in EXIF extension",
      "x_generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-07-30T03:21:00.000Z",
          "ID": "CVE-2019-11041",
          "STATE": "PUBLIC",
          "TITLE": "heap-buffer-overflow on exif_scan_thumbnail in EXIF extension"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1.x below 7.1.31"
                          },
                          {
                            "version_value": "7.2.x below 7.2.21"
                          },
                          {
                            "version_value": "7.3.x below 7.3.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "By orestiskourides at gmail dot com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "exploit": [],
        "generator": {
          "engine": "Vulnogram 0.0.7"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78222",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=78222"
            },
            {
              "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
            },
            {
              "name": "USN-4097-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4097-2/"
            },
            {
              "name": "USN-4097-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4097-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190822-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
            },
            {
              "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/35"
            },
            {
              "name": "DSA-4527",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4527"
            },
            {
              "name": "DSA-4529",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4529"
            },
            {
              "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/38"
            },
            {
              "name": "openSUSE-SU-2019:2271",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
            },
            {
              "name": "https://support.apple.com/kb/HT210634",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT210634"
            },
            {
              "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Oct/9"
            },
            {
              "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
            },
            {
              "name": "https://support.apple.com/kb/HT210722",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT210722"
            },
            {
              "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
            },
            {
              "name": "RHSA-2019:3299",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3299"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "",
          "defect": [
            "https://bugs.php.net/bug.php?id=78222"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11041",
    "datePublished": "2019-08-09T19:26:34.152Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:31:07.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11042 (GCVE-0-2019-11042)

Vulnerability from cvelistv5 – Published: 2019-08-09 19:26 – Updated: 2024-09-17 02:15

Title

heap-buffer-overflow on exif_process_user_comment in EXIF extension

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

17 references

URL	Tags
https://bugs.php.net/bug.php?id=78256	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4097-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4097-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019082…	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Sep/35	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4527	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2019/dsa-4529	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Sep/38	mailing-listx_refsource_BUGTRAQ
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.apple.com/kb/HT210634	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Oct/9	mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Oct/15	mailing-listx_refsource_FULLDISC
https://support.apple.com/kb/HT210722	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2019/Oct/55	mailing-listx_refsource_FULLDISC
https://access.redhat.com/errata/RHSA-2019:3299	vendor-advisoryx_refsource_REDHAT
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.1.x below 7.1.31 Affected: 7.2.x below 7.2.21 Affected: 7.3.x below 7.3.8

Date Public

2019-07-30 00:00

Credits

By orestiskourides at gmail dot com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.061Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78256"
          },
          {
            "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
          },
          {
            "name": "USN-4097-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4097-2/"
          },
          {
            "name": "USN-4097-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4097-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
          },
          {
            "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/35"
          },
          {
            "name": "DSA-4527",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4527"
          },
          {
            "name": "DSA-4529",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4529"
          },
          {
            "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/38"
          },
          {
            "name": "openSUSE-SU-2019:2271",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210634"
          },
          {
            "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Oct/9"
          },
          {
            "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210722"
          },
          {
            "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
          },
          {
            "name": "RHSA-2019:3299",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.x below 7.1.31"
            },
            {
              "status": "affected",
              "version": "7.2.x below 7.2.21"
            },
            {
              "status": "affected",
              "version": "7.3.x below 7.3.8"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "By orestiskourides at gmail dot com"
        }
      ],
      "datePublic": "2019-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:23.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=78256"
        },
        {
          "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
        },
        {
          "name": "USN-4097-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4097-2/"
        },
        {
          "name": "USN-4097-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4097-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
        },
        {
          "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/35"
        },
        {
          "name": "DSA-4527",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4527"
        },
        {
          "name": "DSA-4529",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4529"
        },
        {
          "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/38"
        },
        {
          "name": "openSUSE-SU-2019:2271",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210634"
        },
        {
          "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Oct/9"
        },
        {
          "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210722"
        },
        {
          "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
        },
        {
          "name": "RHSA-2019:3299",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78256"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "heap-buffer-overflow on exif_process_user_comment in EXIF extension",
      "x_generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-07-30T03:21:00.000Z",
          "ID": "CVE-2019-11042",
          "STATE": "PUBLIC",
          "TITLE": "heap-buffer-overflow on exif_process_user_comment in EXIF extension"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1.x below 7.1.31"
                          },
                          {
                            "version_value": "7.2.x below 7.2.21"
                          },
                          {
                            "version_value": "7.3.x below 7.3.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "By orestiskourides at gmail dot com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "exploit": [],
        "generator": {
          "engine": "Vulnogram 0.0.7"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78256",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=78256"
            },
            {
              "name": "[debian-lts-announce] 20190812 [SECURITY] [DLA 1878-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html"
            },
            {
              "name": "USN-4097-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4097-2/"
            },
            {
              "name": "USN-4097-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4097-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190822-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190822-0003/"
            },
            {
              "name": "20190920 [SECURITY] [DSA 4527-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/35"
            },
            {
              "name": "DSA-4527",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4527"
            },
            {
              "name": "DSA-4529",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4529"
            },
            {
              "name": "20190923 [SECURITY] [DSA 4529-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/38"
            },
            {
              "name": "openSUSE-SU-2019:2271",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html"
            },
            {
              "name": "https://support.apple.com/kb/HT210634",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT210634"
            },
            {
              "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Oct/9"
            },
            {
              "name": "20191008 APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Oct/15"
            },
            {
              "name": "https://support.apple.com/kb/HT210722",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT210722"
            },
            {
              "name": "20191031 APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Oct/55"
            },
            {
              "name": "RHSA-2019:3299",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3299"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "",
          "defect": [
            "https://bugs.php.net/bug.php?id=78256"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11042",
    "datePublished": "2019-08-09T19:26:34.193Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:15:56.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11045 (GCVE-0-2019-11045)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-16 17:32

Title

DirectoryIterator class silently truncates after a null byte

Summary

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-170 - Improper Null Termination

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78863	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

Submitted by ryat at php.net

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.106Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78863"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Submitted by ryat at php.net"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-170",
              "description": "CWE-170 Improper Null Termination",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:43.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78863"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78863"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "DirectoryIterator class silently truncates after a null byte",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11045",
          "STATE": "PUBLIC",
          "TITLE": "DirectoryIterator class silently truncates after a null byte"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Submitted by ryat at php.net"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-170 Improper Null Termination"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78863",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78863"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78863"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11045",
    "datePublished": "2019-12-23T02:40:17.130Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:32:41.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11047 (GCVE-0-2019-11047)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-17 04:24

Title

Heap-buffer-overflow READ in exif

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78910	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78910"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:07:26.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78910"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78910"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Heap-buffer-overflow READ in exif",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11047",
          "STATE": "PUBLIC",
          "TITLE": "Heap-buffer-overflow READ in exif"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78910",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78910"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78910"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11047",
    "datePublished": "2019-12-23T02:40:17.978Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:24:19.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11048 (GCVE-0-2019-11048)

Vulnerability from cvelistv5 – Published: 2020-05-20 07:15 – Updated: 2024-09-16 18:13

Title

Temporary files are not cleaned after OOM when parsing HTTP request data

Summary

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-190 - Integer Overflow or Wraparound

Assigner

php mitre root

References

13 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4375-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2020/dsa-4717	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4719	vendor-advisoryx_refsource_DEBIAN
https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
https://bugs.php.net/bug.php?id=78875	x_refsource_MISC
https://bugs.php.net/bug.php?id=78876	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020052…	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.3.x , < 7.3.18 (custom) Affected: 7.4.x , < 7.4.6 (custom) Affected: 7.2.x , < 7.2.31 (custom)

Date Public

2020-05-11 00:00

Credits

jr at coredu dot mp

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2020-8838d072d5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
          },
          {
            "name": "FEDORA-2020-9fa7f4e25c",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
          },
          {
            "name": "USN-4375-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4375-1/"
          },
          {
            "name": "openSUSE-SU-2020:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
          },
          {
            "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
          },
          {
            "name": "DSA-4717",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4717"
          },
          {
            "name": "DSA-4719",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4719"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78875"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78876"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.3.18",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.6",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.2.31",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "jr at coredu dot mp"
        }
      ],
      "datePublic": "2020-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190 Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:51.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "name": "FEDORA-2020-8838d072d5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
        },
        {
          "name": "FEDORA-2020-9fa7f4e25c",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
        },
        {
          "name": "USN-4375-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4375-1/"
        },
        {
          "name": "openSUSE-SU-2020:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
        },
        {
          "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
        },
        {
          "name": "DSA-4717",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4717"
        },
        {
          "name": "DSA-4719",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4719"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78875"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78876"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78875"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Temporary files are not cleaned after OOM when parsing HTTP request data",
      "workarounds": [
        {
          "lang": "en",
          "value": "Setting post_max_size to value significantly lower than the memory limit prevents this issue from being exploited. Disabling file uploads also prevents this issue from happening."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2020-05-11T21:22:00.000Z",
          "ID": "CVE-2019-11048",
          "STATE": "PUBLIC",
          "TITLE": "Temporary files are not cleaned after OOM when parsing HTTP request data"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.18"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.6"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.31"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "jr at coredu dot mp"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400 Uncontrolled Resource Consumption"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190 Integer Overflow or Wraparound"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2020-8838d072d5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
            },
            {
              "name": "FEDORA-2020-9fa7f4e25c",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
            },
            {
              "name": "USN-4375-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4375-1/"
            },
            {
              "name": "openSUSE-SU-2020:0847",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
            },
            {
              "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
            },
            {
              "name": "DSA-4717",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4717"
            },
            {
              "name": "DSA-4719",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4719"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=78875",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78875"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=78876",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78876"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200528-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78875"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Setting post_max_size to value significantly lower than the memory limit prevents this issue from being exploited. Disabling file uploads also prevents this issue from happening."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11048",
    "datePublished": "2020-05-20T07:15:15.636Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:13:31.009Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11050 (GCVE-0-2019-11050)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-16 18:33

Title

Use-after-free in exif parsing under memory sanitizer

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78793	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

Submitted by Nikita Popov

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78793"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Submitted by Nikita Popov"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:48.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78793"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78793"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Use-after-free in exif parsing under memory sanitizer",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11050",
          "STATE": "PUBLIC",
          "TITLE": "Use-after-free in exif parsing under memory sanitizer"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Submitted by Nikita Popov"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78793",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78793"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78793"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11050",
    "datePublished": "2019-12-23T02:40:18.861Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:33:19.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13224 (GCVE-0-2019-13224)

Vulnerability from cvelistv5 – Published: 2019-07-10 13:50 – Updated: 2024-08-04 23:49

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/kkos/oniguruma/commit/0f7f61ed…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4088-1/	vendor-advisoryx_refsource_UBUNTU
https://support.f5.com/csp/article/K00103182	x_refsource_CONFIRM
https://support.f5.com/csp/article/K00103182?utm_…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201911-03	vendor-advisoryx_refsource_GENTOO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:24.159Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55"
          },
          {
            "name": "[debian-lts-announce] 20190717 [SECURITY] [DLA 1854-1] libonig security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html"
          },
          {
            "name": "FEDORA-2019-3f3d0953db",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
          },
          {
            "name": "FEDORA-2019-5409bb5e68",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
          },
          {
            "name": "USN-4088-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4088-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K00103182"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K00103182?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "GLSA-201911-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201911-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-07T20:06:33.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55"
        },
        {
          "name": "[debian-lts-announce] 20190717 [SECURITY] [DLA 1854-1] libonig security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html"
        },
        {
          "name": "FEDORA-2019-3f3d0953db",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
        },
        {
          "name": "FEDORA-2019-5409bb5e68",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
        },
        {
          "name": "USN-4088-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4088-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K00103182"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K00103182?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "GLSA-201911-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201911-03"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13224",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55",
              "refsource": "CONFIRM",
              "url": "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55"
            },
            {
              "name": "[debian-lts-announce] 20190717 [SECURITY] [DLA 1854-1] libonig security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html"
            },
            {
              "name": "FEDORA-2019-3f3d0953db",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
            },
            {
              "name": "FEDORA-2019-5409bb5e68",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
            },
            {
              "name": "USN-4088-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4088-1/"
            },
            {
              "name": "https://support.f5.com/csp/article/K00103182",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K00103182"
            },
            {
              "name": "https://support.f5.com/csp/article/K00103182?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K00103182?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "GLSA-201911-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201911-03"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13224",
    "datePublished": "2019-07-10T13:50:57.000Z",
    "dateReserved": "2019-07-03T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:24.159Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13225 (GCVE-0-2019-13225)

Vulnerability from cvelistv5 – Published: 2019-07-10 13:50 – Updated: 2024-08-04 23:49

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

4 references

URL	Tags
https://github.com/kkos/oniguruma/commit/c509265c…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/201911-03	vendor-advisoryx_refsource_GENTOO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:23.947Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c"
          },
          {
            "name": "FEDORA-2019-3f3d0953db",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
          },
          {
            "name": "FEDORA-2019-5409bb5e68",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
          },
          {
            "name": "GLSA-201911-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201911-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-07T20:06:32.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c"
        },
        {
          "name": "FEDORA-2019-3f3d0953db",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
        },
        {
          "name": "FEDORA-2019-5409bb5e68",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
        },
        {
          "name": "GLSA-201911-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201911-03"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13225",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c",
              "refsource": "CONFIRM",
              "url": "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c"
            },
            {
              "name": "FEDORA-2019-3f3d0953db",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/"
            },
            {
              "name": "FEDORA-2019-5409bb5e68",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/"
            },
            {
              "name": "GLSA-201911-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201911-03"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13225",
    "datePublished": "2019-07-10T13:50:00.000Z",
    "dateReserved": "2019-07-03T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:23.947Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2020:3662

CVE-2019-11039 (GCVE-0-2019-11039)

CVE-2019-11040 (GCVE-0-2019-11040)

CVE-2019-11041 (GCVE-0-2019-11041)

CVE-2019-11042 (GCVE-0-2019-11042)

CVE-2019-11045 (GCVE-0-2019-11045)

CVE-2019-11047 (GCVE-0-2019-11047)

CVE-2019-11048 (GCVE-0-2019-11048)

CVE-2019-11050 (GCVE-0-2019-11050)

CVE-2019-13224 (GCVE-0-2019-13224)

CVE-2019-13225 (GCVE-0-2019-13225)

Tags

Sightings

Nomenclature