Vulnerability-Lookup

RHSA-2020:5275

Vulnerability from csaf_redhat - Published: 2020-12-01 12:05 - Updated: 2026-08-17 16:32

Summary

Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for rh-php73-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: rh-php73-php (7.3.20). (BZ#1853211) Security Fix(es): * php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte (CVE-2019-11045) * php: Information disclosure in exif_read_data() (CVE-2019-11047) * php: Integer wraparounds when receiving multipart forms (CVE-2019-11048) * oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203) * oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204) * php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059) * php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060) * php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062) * php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063) * php: Information disclosure in exif_read_data() function (CVE-2020-7064) * php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065) * php: Out of bounds read when parsing EXIF information (CVE-2019-11050) * oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246) * php: Information disclosure in function get_headers (CVE-2020-7066) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Software Collections 3.6 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2019-11045

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-170 - Improper Null Termination

Affected products

Fixed 304 products

Product	Version	Remediation
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-0:7.3.20-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-cli-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-cli-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-cli-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-common-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-common-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-common-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dba-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dba-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dba-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dbg-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dbg-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-dbg-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-devel-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-devel-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-devel-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-embedded-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-embedded-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-embedded-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-enchant-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-enchant-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-enchant-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-fpm-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-fpm-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-fpm-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-gmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-intl-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-intl-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-intl-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-json-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-json-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-json-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-ldap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-ldap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-ldap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-odbc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-odbc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-odbc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-opcache-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-opcache-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-opcache-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pdo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pdo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pdo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-process-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-process-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-process-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pspell-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pspell-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-pspell-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-recode-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-recode-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-recode-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-snmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-snmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-snmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-soap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-soap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-soap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xml-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xml-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xml-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-zip-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-zip-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.6.Z:rh-php73-php-zip-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-0:7.3.20-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-bcmath-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-cli-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-cli-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-cli-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-common-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-common-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-common-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dba-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dba-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dba-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dbg-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dbg-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-dbg-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-debuginfo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-devel-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-devel-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-devel-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-embedded-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-embedded-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-embedded-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-enchant-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-enchant-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-enchant-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-fpm-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-fpm-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-fpm-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-gmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-intl-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-intl-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-intl-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-json-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-json-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-json-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-ldap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-ldap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-ldap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mbstring-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-mysqlnd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-odbc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-odbc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-odbc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-opcache-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-opcache-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-opcache-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pdo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pdo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pdo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pgsql-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-process-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-process-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-process-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pspell-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pspell-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-pspell-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-recode-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-recode-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-recode-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-snmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-snmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-snmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-soap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-soap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-soap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xml-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xml-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xml-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-xmlrpc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-zip-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-zip-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6-7.7.Z:rh-php73-php-zip-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-bcmath-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-bcmath-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-bcmath-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-cli-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-cli-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-cli-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-common-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-common-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-common-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dba-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dba-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dba-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dbg-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dbg-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-dbg-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-debuginfo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-debuginfo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-debuginfo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-devel-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-devel-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-devel-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-embedded-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-embedded-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-embedded-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-enchant-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-enchant-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-enchant-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-fpm-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-fpm-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-fpm-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-gmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-intl-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-intl-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-intl-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-json-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-json-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-json-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-ldap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-ldap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-ldap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mbstring-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mbstring-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mbstring-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mysqlnd-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mysqlnd-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-mysqlnd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-odbc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-odbc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-odbc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-opcache-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-opcache-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-opcache-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pdo-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pdo-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pdo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pgsql-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pgsql-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pgsql-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-process-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-process-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-process-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pspell-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pspell-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-pspell-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-recode-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-recode-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-recode-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-snmp-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-snmp-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-snmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-soap-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-soap-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-soap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xml-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xml-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xml-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xmlrpc-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xmlrpc-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-xmlrpc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-zip-0:7.3.20-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-zip-0:7.3.20-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.6:rh-php73-php-zip-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-bcmath-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-cli-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-common-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-dba-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-dbg-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-debuginfo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-devel-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-embedded-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-enchant-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-fpm-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-gd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-gmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-intl-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-json-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-ldap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-mbstring-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-mysqlnd-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-odbc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-opcache-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-pdo-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-pgsql-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-process-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-pspell-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-recode-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-snmp-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-soap-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-xml-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-xmlrpc-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.6:rh-php73-php-zip-0:7.3.20-1.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2019-11047

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2019-11048

A flaw was found in PHP under a non-default configuration, where it was vulnerable to integer wraparounds during the reception of a multipart POST request. This flaw allows a remote attacker to repeatedly crash PHP and fill the filesystem with temporary PHP files, resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2019-11050

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Low

CVE-2019-19203

An out-of-bounds read vulnerability was found in the way Oniguruma handled regular expressions with GB18030 character encoding. A UChar pointer is dereferenced without checking if it passed the end of the matched string, leading to a heap-based buffer over-read. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, might crash the application causing a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2019-19204

An out-of-bounds read vulnerability was found in Oniguruma in the way it handled regular expression quantifiers. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, could possibly crash the application, resulting in a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2019-19246

A vulnerability was found in Oniguruma, where improper bounds checking in str_lower_case_match within regexec.c can cause a heap-based buffer overflow, a remote attacker could exploit this flaw to crash the application or, in certain scenarios, execute arbitrary code. This occurs when the application processes specially crafted regex patterns, potentially leading to unintended behavior.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7059

When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7060

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7062

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7063

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-284 - Improper Access Control

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7064

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7065

A vulnerability was found in PHP while using the mb_strtolower() function with UTF-32LE encoding, where certain invalid strings cause PHP to overwrite the stack-allocated buffer. This flaw leads to memory corruption, crashes, and potential code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Moderate

CVE-2020-7066

In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 304 products, the same list as for CVE-2019-11045

Threats

Impact Low

References

78 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:5275	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1777537	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786570	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786572	external
https://bugzilla.redhat.com/show_bug.cgi?id=1788258	external
https://bugzilla.redhat.com/show_bug.cgi?id=1797776	external
https://bugzilla.redhat.com/show_bug.cgi?id=1797779	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802061	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802068	external
https://bugzilla.redhat.com/show_bug.cgi?id=1808532	external
https://bugzilla.redhat.com/show_bug.cgi?id=1808536	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820601	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820604	external
https://bugzilla.redhat.com/show_bug.cgi?id=1820627	external
https://bugzilla.redhat.com/show_bug.cgi?id=1837842	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2019-11045	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786572	external
https://www.cve.org/CVERecord?id=CVE-2019-11045	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11045	external
https://access.redhat.com/security/cve/CVE-2019-11047	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786570	external
https://www.cve.org/CVERecord?id=CVE-2019-11047	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11047	external
https://access.redhat.com/security/cve/CVE-2019-11048	self
https://bugzilla.redhat.com/show_bug.cgi?id=1837842	external
https://www.cve.org/CVERecord?id=CVE-2019-11048	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11048	external
https://access.redhat.com/security/cve/CVE-2019-11050	self
https://bugzilla.redhat.com/show_bug.cgi?id=1788258	external
https://www.cve.org/CVERecord?id=CVE-2019-11050	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11050	external
https://access.redhat.com/security/cve/CVE-2019-19203	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802061	external
https://www.cve.org/CVERecord?id=CVE-2019-19203	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19203	external
https://access.redhat.com/security/cve/CVE-2019-19204	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802068	external
https://www.cve.org/CVERecord?id=CVE-2019-19204	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19204	external
https://access.redhat.com/security/cve/CVE-2019-19246	self
https://bugzilla.redhat.com/show_bug.cgi?id=1777537	external
https://www.cve.org/CVERecord?id=CVE-2019-19246	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19246	external
https://access.redhat.com/security/cve/CVE-2020-7059	self
https://bugzilla.redhat.com/show_bug.cgi?id=1797776	external
https://www.cve.org/CVERecord?id=CVE-2020-7059	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7059	external
https://access.redhat.com/security/cve/CVE-2020-7060	self
https://bugzilla.redhat.com/show_bug.cgi?id=1797779	external
https://www.cve.org/CVERecord?id=CVE-2020-7060	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7060	external
https://access.redhat.com/security/cve/CVE-2020-7062	self
https://bugzilla.redhat.com/show_bug.cgi?id=1808532	external
https://www.cve.org/CVERecord?id=CVE-2020-7062	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7062	external
https://access.redhat.com/security/cve/CVE-2020-7063	self
https://bugzilla.redhat.com/show_bug.cgi?id=1808536	external
https://www.cve.org/CVERecord?id=CVE-2020-7063	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7063	external
https://access.redhat.com/security/cve/CVE-2020-7064	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820601	external
https://www.cve.org/CVERecord?id=CVE-2020-7064	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7064	external
https://bugs.php.net/bug.php?id=79282	external
https://access.redhat.com/security/cve/CVE-2020-7065	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820627	external
https://www.cve.org/CVERecord?id=CVE-2020-7065	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7065	external
https://www.php.net/ChangeLog-7.php#PHP_7_3	external
https://www.php.net/ChangeLog-7.php#PHP_7_4	external
https://access.redhat.com/security/cve/CVE-2020-7066	self
https://bugzilla.redhat.com/show_bug.cgi?id=1820604	external
https://www.cve.org/CVERecord?id=CVE-2020-7066	external
https://nvd.nist.gov/vuln/detail/CVE-2020-7066	external
https://bugs.php.net/bug.php?id=79329	external

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2019-11045 (GCVE-0-2019-11045)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-16 17:32

Title

DirectoryIterator class silently truncates after a null byte

Summary

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-170 - Improper Null Termination

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78863	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

Submitted by ryat at php.net

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.106Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78863"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Submitted by ryat at php.net"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-170",
              "description": "CWE-170 Improper Null Termination",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:43.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78863"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78863"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "DirectoryIterator class silently truncates after a null byte",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11045",
          "STATE": "PUBLIC",
          "TITLE": "DirectoryIterator class silently truncates after a null byte"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Submitted by ryat at php.net"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-170 Improper Null Termination"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78863",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78863"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78863"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11045",
    "datePublished": "2019-12-23T02:40:17.130Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:32:41.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11047 (GCVE-0-2019-11047)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-17 04:24

Title

Heap-buffer-overflow READ in exif

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78910	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78910"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:07:26.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78910"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78910"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Heap-buffer-overflow READ in exif",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11047",
          "STATE": "PUBLIC",
          "TITLE": "Heap-buffer-overflow READ in exif"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19044"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78910",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78910"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78910"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11047",
    "datePublished": "2019-12-23T02:40:17.978Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:24:19.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11048 (GCVE-0-2019-11048)

Vulnerability from cvelistv5 – Published: 2020-05-20 07:15 – Updated: 2024-09-16 18:13

Title

Temporary files are not cleaned after OOM when parsing HTTP request data

Summary

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-190 - Integer Overflow or Wraparound

Assigner

php mitre root

References

13 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4375-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2020/dsa-4717	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4719	vendor-advisoryx_refsource_DEBIAN
https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
https://bugs.php.net/bug.php?id=78875	x_refsource_MISC
https://bugs.php.net/bug.php?id=78876	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020052…	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.3.x , < 7.3.18 (custom) Affected: 7.4.x , < 7.4.6 (custom) Affected: 7.2.x , < 7.2.31 (custom)

Date Public

2020-05-11 00:00

Credits

jr at coredu dot mp

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2020-8838d072d5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
          },
          {
            "name": "FEDORA-2020-9fa7f4e25c",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
          },
          {
            "name": "USN-4375-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4375-1/"
          },
          {
            "name": "openSUSE-SU-2020:0847",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
          },
          {
            "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
          },
          {
            "name": "DSA-4717",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4717"
          },
          {
            "name": "DSA-4719",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4719"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78875"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78876"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.3.18",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.6",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.2.31",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "jr at coredu dot mp"
        }
      ],
      "datePublic": "2020-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190 Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:51.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "name": "FEDORA-2020-8838d072d5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
        },
        {
          "name": "FEDORA-2020-9fa7f4e25c",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
        },
        {
          "name": "USN-4375-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4375-1/"
        },
        {
          "name": "openSUSE-SU-2020:0847",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
        },
        {
          "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
        },
        {
          "name": "DSA-4717",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4717"
        },
        {
          "name": "DSA-4719",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4719"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78875"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78876"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78875"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Temporary files are not cleaned after OOM when parsing HTTP request data",
      "workarounds": [
        {
          "lang": "en",
          "value": "Setting post_max_size to value significantly lower than the memory limit prevents this issue from being exploited. Disabling file uploads also prevents this issue from happening."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2020-05-11T21:22:00.000Z",
          "ID": "CVE-2019-11048",
          "STATE": "PUBLIC",
          "TITLE": "Temporary files are not cleaned after OOM when parsing HTTP request data"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.18"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.6"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.31"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "jr at coredu dot mp"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400 Uncontrolled Resource Consumption"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190 Integer Overflow or Wraparound"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2020-8838d072d5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBA3TFZSP3TB5N4G24SO6BI64RJZXE3D/"
            },
            {
              "name": "FEDORA-2020-9fa7f4e25c",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMDUQ7XFONY3BWTAQQUD3QUGZT6NFZUF/"
            },
            {
              "name": "USN-4375-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4375-1/"
            },
            {
              "name": "openSUSE-SU-2020:0847",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html"
            },
            {
              "name": "[debian-lts-announce] 20200629 [SECURITY] [DLA 2261-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00033.html"
            },
            {
              "name": "DSA-4717",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4717"
            },
            {
              "name": "DSA-4719",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4719"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=78875",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78875"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=78876",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78876"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200528-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200528-0006/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78875"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Setting post_max_size to value significantly lower than the memory limit prevents this issue from being exploited. Disabling file uploads also prevents this issue from happening."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11048",
    "datePublished": "2020-05-20T07:15:15.636Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:13:31.009Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11050 (GCVE-0-2019-11050)

Vulnerability from cvelistv5 – Published: 2019-12-23 02:40 – Updated: 2024-09-16 18:33

Title

Use-after-free in exif parsing under memory sanitizer

Summary

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

13 references

URL	Tags
https://bugs.php.net/bug.php?id=78793	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4239-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.26 (custom) Affected: 7.3.x , < 7.3.13 (custom) Affected: 7.4.x , < 7.4.1 (custom)

Date Public

2019-12-17 00:00

Credits

Submitted by Nikita Popov

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78793"
          },
          {
            "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
          },
          {
            "name": "FEDORA-2019-437d94e271",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
          },
          {
            "name": "FEDORA-2019-a54a622670",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
          },
          {
            "name": "USN-4239-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4239-1/"
          },
          {
            "name": "openSUSE-SU-2020:0080",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
          },
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.26",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.13",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.1",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Submitted by Nikita Popov"
        }
      ],
      "datePublic": "2019-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:48.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78793"
        },
        {
          "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
        },
        {
          "name": "FEDORA-2019-437d94e271",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
        },
        {
          "name": "FEDORA-2019-a54a622670",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
        },
        {
          "name": "USN-4239-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4239-1/"
        },
        {
          "name": "openSUSE-SU-2020:0080",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
        },
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=78793"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Use-after-free in exif parsing under memory sanitizer",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2019-12-17T03:02:00.000Z",
          "ID": "CVE-2019-11050",
          "STATE": "PUBLIC",
          "TITLE": "Use-after-free in exif parsing under memory sanitizer"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.26"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.13"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Submitted by Nikita Popov"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=78793",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78793"
            },
            {
              "name": "[debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0002/"
            },
            {
              "name": "FEDORA-2019-437d94e271",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/"
            },
            {
              "name": "FEDORA-2019-a54a622670",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/"
            },
            {
              "name": "USN-4239-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4239-1/"
            },
            {
              "name": "openSUSE-SU-2020:0080",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html"
            },
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=78793"
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2019-11050",
    "datePublished": "2019-12-23T02:40:18.861Z",
    "dateReserved": "2019-04-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:33:19.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19203 (GCVE-0-2019-19203)

Vulnerability from cvelistv5 – Published: 2019-11-21 20:06 – Updated: 2024-08-05 02:09

Summary

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/kkos/oniguruma/releases/tag/v6…	x_refsource_MISC
https://github.com/kkos/oniguruma/issues/163	x_refsource_MISC
https://github.com/ManhNDd/CVE-2019-19203	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://github.com/tarantula-team/CVE-2019-19203	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/issues/163"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ManhNDd/CVE-2019-19203"
          },
          {
            "name": "FEDORA-2019-d942abd0d4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
          },
          {
            "name": "FEDORA-2019-73197ff9a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/tarantula-team/CVE-2019-19203"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-24T14:18:55.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kkos/oniguruma/issues/163"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ManhNDd/CVE-2019-19203"
        },
        {
          "name": "FEDORA-2019-d942abd0d4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
        },
        {
          "name": "FEDORA-2019-73197ff9a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tarantula-team/CVE-2019-19203"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19203",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2",
              "refsource": "MISC",
              "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
            },
            {
              "name": "https://github.com/kkos/oniguruma/issues/163",
              "refsource": "MISC",
              "url": "https://github.com/kkos/oniguruma/issues/163"
            },
            {
              "name": "https://github.com/ManhNDd/CVE-2019-19203",
              "refsource": "MISC",
              "url": "https://github.com/ManhNDd/CVE-2019-19203"
            },
            {
              "name": "FEDORA-2019-d942abd0d4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
            },
            {
              "name": "FEDORA-2019-73197ff9a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
            },
            {
              "name": "https://github.com/tarantula-team/CVE-2019-19203",
              "refsource": "MISC",
              "url": "https://github.com/tarantula-team/CVE-2019-19203"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19203",
    "datePublished": "2019-11-21T20:06:59.000Z",
    "dateReserved": "2019-11-21T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:39.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19204 (GCVE-0-2019-19204)

Vulnerability from cvelistv5 – Published: 2019-11-21 20:06 – Updated: 2024-08-05 02:09

Summary

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/kkos/oniguruma/releases/tag/v6…	x_refsource_MISC
https://github.com/kkos/oniguruma/issues/162	x_refsource_MISC
https://github.com/ManhNDd/CVE-2019-19204	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://github.com/tarantula-team/CVE-2019-19204	x_refsource_MISC
https://usn.ubuntu.com/4460-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.457Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/issues/162"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ManhNDd/CVE-2019-19204"
          },
          {
            "name": "FEDORA-2019-d942abd0d4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
          },
          {
            "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
          },
          {
            "name": "FEDORA-2019-73197ff9a0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/tarantula-team/CVE-2019-19204"
          },
          {
            "name": "USN-4460-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4460-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-24T13:06:04.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kkos/oniguruma/issues/162"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ManhNDd/CVE-2019-19204"
        },
        {
          "name": "FEDORA-2019-d942abd0d4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
        },
        {
          "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
        },
        {
          "name": "FEDORA-2019-73197ff9a0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tarantula-team/CVE-2019-19204"
        },
        {
          "name": "USN-4460-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4460-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19204",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2",
              "refsource": "MISC",
              "url": "https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2"
            },
            {
              "name": "https://github.com/kkos/oniguruma/issues/162",
              "refsource": "MISC",
              "url": "https://github.com/kkos/oniguruma/issues/162"
            },
            {
              "name": "https://github.com/ManhNDd/CVE-2019-19204",
              "refsource": "MISC",
              "url": "https://github.com/ManhNDd/CVE-2019-19204"
            },
            {
              "name": "FEDORA-2019-d942abd0d4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
            },
            {
              "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
            },
            {
              "name": "FEDORA-2019-73197ff9a0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"
            },
            {
              "name": "https://github.com/tarantula-team/CVE-2019-19204",
              "refsource": "MISC",
              "url": "https://github.com/tarantula-team/CVE-2019-19204"
            },
            {
              "name": "USN-4460-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4460-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19204",
    "datePublished": "2019-11-21T20:06:47.000Z",
    "dateReserved": "2019-11-21T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:39.457Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19246 (GCVE-0-2019-19246)

Vulnerability from cvelistv5 – Published: 2019-11-25 16:16 – Updated: 2024-08-05 02:09

Summary

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://github.com/kkos/oniguruma/commit/d3e40292…	x_refsource_MISC
https://bugs.php.net/bug.php?id=78559	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4460-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.638Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78559"
          },
          {
            "name": "FEDORA-2019-d942abd0d4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
          },
          {
            "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
          },
          {
            "name": "USN-4460-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4460-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-24T13:06:05.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=78559"
        },
        {
          "name": "FEDORA-2019-d942abd0d4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
        },
        {
          "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
        },
        {
          "name": "USN-4460-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4460-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19246",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b",
              "refsource": "MISC",
              "url": "https://github.com/kkos/oniguruma/commit/d3e402928b6eb3327f8f7d59a9edfa622fec557b"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=78559",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=78559"
            },
            {
              "name": "FEDORA-2019-d942abd0d4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"
            },
            {
              "name": "[debian-lts-announce] 20191204 [SECURITY] [DLA 2020-1] libonig security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html"
            },
            {
              "name": "USN-4460-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4460-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19246",
    "datePublished": "2019-11-25T16:16:20.000Z",
    "dateReserved": "2019-11-25T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:39.638Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-7059 (GCVE-0-2020-7059)

Vulnerability from cvelistv5 – Published: 2020-02-10 07:45 – Updated: 2024-09-17 02:37

Title

OOB read in php_strip_tags_ex

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

14 references

URL	Tags
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/4279-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/202003-57	vendor-advisoryx_refsource_GENTOO
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://bugs.php.net/bug.php?id=79099	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020022…	x_refsource_CONFIRM
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.27 (custom) Affected: 7.3.x , < 7.3.14 (custom) Affected: 7.4.x , < 7.4.2 (custom)

Date Public

2020-01-21 00:00

Credits

Reported by wxhusst at gmail dot com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:18:03.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "USN-4279-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4279-1/"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
          },
          {
            "name": "openSUSE-SU-2020:0341",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
          },
          {
            "name": "GLSA-202003-57",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-57"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=79099"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.27",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.14",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.2",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported by wxhusst at gmail dot com"
        }
      ],
      "datePublic": "2020-01-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:07:28.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "USN-4279-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4279-1/"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
        },
        {
          "name": "openSUSE-SU-2020:0341",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
        },
        {
          "name": "GLSA-202003-57",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-57"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=79099"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=79099"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "OOB read in php_strip_tags_ex",
      "workarounds": [
        {
          "lang": "en",
          "value": "Usage of fgetss() has been DEPRECATED as of PHP 7.3.0. Please use strip_tags() or other means sanitizing HTML code."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2020-01-21T15:21:00.000Z",
          "ID": "CVE-2020-7059",
          "STATE": "PUBLIC",
          "TITLE": "OOB read in php_strip_tags_ex"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.27"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.14"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Reported by wxhusst at gmail dot com"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "USN-4279-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4279-1/"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
            },
            {
              "name": "openSUSE-SU-2020:0341",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
            },
            {
              "name": "GLSA-202003-57",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-57"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=79099",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=79099"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=79099"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Usage of fgetss() has been DEPRECATED as of PHP 7.3.0. Please use strip_tags() or other means sanitizing HTML code."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2020-7059",
    "datePublished": "2020-02-10T07:45:13.921Z",
    "dateReserved": "2020-01-15T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:37:14.052Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-7060 (GCVE-0-2020-7060)

Vulnerability from cvelistv5 – Published: 2020-02-10 07:45 – Updated: 2024-09-17 03:33

Title

global buffer-overflow in mbfl_filt_conv_big5_wchar

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

php mitre root

References

14 references

URL	Tags
https://seclists.org/bugtraq/2020/Feb/27	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4626	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/4279-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2020/dsa-4628	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Feb/31	mailing-listx_refsource_BUGTRAQ
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/202003-57	vendor-advisoryx_refsource_GENTOO
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020022…	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=79037	x_refsource_MISC
https://seclists.org/bugtraq/2021/Jan/3	mailing-listx_refsource_BUGTRAQ
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.2.x , < 7.2.27 (custom) Affected: 7.3.x , < 7.3.14 (custom) Affected: 7.4.x , < 7.4.2 (custom)

Date Public

2020-01-21 00:00

Credits

Reported by reza at iseclab dot org

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:18:03.112Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/27"
          },
          {
            "name": "DSA-4626",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4626"
          },
          {
            "name": "USN-4279-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4279-1/"
          },
          {
            "name": "DSA-4628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4628"
          },
          {
            "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Feb/31"
          },
          {
            "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
          },
          {
            "name": "openSUSE-SU-2020:0341",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
          },
          {
            "name": "GLSA-202003-57",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-57"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=79037"
          },
          {
            "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2021/Jan/3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.2.27",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.14",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.2",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported by reza at iseclab dot org"
        }
      ],
      "datePublic": "2020-01-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:07:23.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/27"
        },
        {
          "name": "DSA-4626",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4626"
        },
        {
          "name": "USN-4279-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4279-1/"
        },
        {
          "name": "DSA-4628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4628"
        },
        {
          "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Feb/31"
        },
        {
          "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
        },
        {
          "name": "openSUSE-SU-2020:0341",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
        },
        {
          "name": "GLSA-202003-57",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-57"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=79037"
        },
        {
          "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2021/Jan/3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=79037"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "global buffer-overflow in mbfl_filt_conv_big5_wchar",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2020-01-21T15:21:00.000Z",
          "ID": "CVE-2020-7060",
          "STATE": "PUBLIC",
          "TITLE": "global buffer-overflow in mbfl_filt_conv_big5_wchar"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.27"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.14"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Reported by reza at iseclab dot org"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-125 Out-of-bounds Read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200218 [SECURITY] [DSA 4626-1] php7.3 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/27"
            },
            {
              "name": "DSA-4626",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4626"
            },
            {
              "name": "USN-4279-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4279-1/"
            },
            {
              "name": "DSA-4628",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4628"
            },
            {
              "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Feb/31"
            },
            {
              "name": "[debian-lts-announce] 20200228 [SECURITY] [DLA 2124-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html"
            },
            {
              "name": "openSUSE-SU-2020:0341",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
            },
            {
              "name": "GLSA-202003-57",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-57"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200221-0002/"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=79037",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=79037"
            },
            {
              "name": "20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2021/Jan/3"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=79037"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2020-7060",
    "datePublished": "2020-02-10T07:45:14.320Z",
    "dateReserved": "2020-01-15T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:33:06.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-7062 (GCVE-0-2020-7062)

Vulnerability from cvelistv5 – Published: 2020-02-27 20:25 – Updated: 2024-09-16 22:24

Title

Null Pointer Dereference in PHP Session Upload Progress

Summary

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476 - NULL Pointer Dereference

Assigner

php mitre root

References

8 references

URL	Tags
https://bugs.php.net/bug.php?id=79221	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/202003-57	vendor-advisoryx_refsource_GENTOO
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4330-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2020/dsa-4717	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4719	vendor-advisoryx_refsource_DEBIAN
https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
PHP Group	PHP	Affected: 7.3.x , < 7.3.15 (custom) Affected: 7.4.x , < 7.4.3 (custom) Affected: 7.2.x , < 7.2.28 (custom)

Date Public

2020-02-17 00:00

Credits

Reported by ryat@php.net

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:18:03.016Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=79221"
          },
          {
            "name": "openSUSE-SU-2020:0341",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
          },
          {
            "name": "GLSA-202003-57",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-57"
          },
          {
            "name": "[debian-lts-announce] 20200326 [SECURITY] [DLA 2160-1] php5 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html"
          },
          {
            "name": "USN-4330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4330-1/"
          },
          {
            "name": "DSA-4717",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4717"
          },
          {
            "name": "DSA-4719",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4719"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2021-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PHP",
          "vendor": "PHP Group",
          "versions": [
            {
              "lessThan": "7.3.15",
              "status": "affected",
              "version": "7.3.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.3",
              "status": "affected",
              "version": "7.4.x",
              "versionType": "custom"
            },
            {
              "lessThan": "7.2.28",
              "status": "affected",
              "version": "7.2.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "file_uploads=1\nsession.upload_progress.enabled=1\nsession.upload_progress.cleanup=0"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported by ryat@php.net"
        }
      ],
      "datePublic": "2020-02-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-22T17:06:46.000Z",
        "orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
        "shortName": "php"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.php.net/bug.php?id=79221"
        },
        {
          "name": "openSUSE-SU-2020:0341",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
        },
        {
          "name": "GLSA-202003-57",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-57"
        },
        {
          "name": "[debian-lts-announce] 20200326 [SECURITY] [DLA 2160-1] php5 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html"
        },
        {
          "name": "USN-4330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4330-1/"
        },
        {
          "name": "DSA-4717",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4717"
        },
        {
          "name": "DSA-4719",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4719"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2021-14"
        }
      ],
      "source": {
        "defect": [
          "https://bugs.php.net/bug.php?id=79221"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Null Pointer Dereference in PHP Session Upload Progress",
      "workarounds": [
        {
          "lang": "en",
          "value": "Disable file uploading, file upload tracking or enable session.upload_progress.cleanup."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@php.net",
          "DATE_PUBLIC": "2020-02-17T16:21:00.000Z",
          "ID": "CVE-2020-7062",
          "STATE": "PUBLIC",
          "TITLE": "Null Pointer Dereference in PHP Session Upload Progress"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PHP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.3.x",
                            "version_value": "7.3.15"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.4.x",
                            "version_value": "7.4.3"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "7.2.x",
                            "version_value": "7.2.28"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PHP Group"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "file_uploads=1\nsession.upload_progress.enabled=1\nsession.upload_progress.cleanup=0"
          }
        ],
        "credit": [
          {
            "lang": "eng",
            "value": "Reported by ryat@php.net"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-476 NULL Pointer Dereference"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=79221",
              "refsource": "MISC",
              "url": "https://bugs.php.net/bug.php?id=79221"
            },
            {
              "name": "openSUSE-SU-2020:0341",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html"
            },
            {
              "name": "GLSA-202003-57",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-57"
            },
            {
              "name": "[debian-lts-announce] 20200326 [SECURITY] [DLA 2160-1] php5 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html"
            },
            {
              "name": "USN-4330-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4330-1/"
            },
            {
              "name": "DSA-4717",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4717"
            },
            {
              "name": "DSA-4719",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4719"
            },
            {
              "name": "https://www.tenable.com/security/tns-2021-14",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2021-14"
            }
          ]
        },
        "source": {
          "defect": [
            "https://bugs.php.net/bug.php?id=79221"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Disable file uploading, file upload tracking or enable session.upload_progress.cleanup."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b",
    "assignerShortName": "php",
    "cveId": "CVE-2020-7062",
    "datePublished": "2020-02-27T20:25:15.153Z",
    "dateReserved": "2020-01-15T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:24:49.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2020:5275

CVE-2019-11045 (GCVE-0-2019-11045)

CVE-2019-11047 (GCVE-0-2019-11047)

CVE-2019-11048 (GCVE-0-2019-11048)

CVE-2019-11050 (GCVE-0-2019-11050)

CVE-2019-19203 (GCVE-0-2019-19203)

CVE-2019-19204 (GCVE-0-2019-19204)

CVE-2019-19246 (GCVE-0-2019-19246)

CVE-2020-7059 (GCVE-0-2020-7059)

CVE-2020-7060 (GCVE-0-2020-7060)

CVE-2020-7062 (GCVE-0-2020-7062)

Tags

Sightings

Nomenclature