7.1

CVE-2019-11041

Exploit

heap-buffer-overflow on exif_scan_thumbnail in EXIF extension

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version >= 7.1.0 < 7.1.31
Php ≫ Php Version >= 7.2.0 < 7.2.21
Php ≫ Php Version >= 7.3.0 < 7.3.8
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.04
Apple ≫ macOS X Version < 10.15.1
Opensuse ≫ Leap Version 15.0
Redhat ≫ Software Collections Version 1.0
Tenable ≫ Tenable.Sc Version < 5.19.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.42% 0.901
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 2.8 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
PHP 4.8 2.2 2.5
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://access.redhat.com/errata/RHSA-2019:3299
Third Party Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory
https://support.apple.com/kb/HT210722
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Oct/55
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT210634
Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/38
Third Party Advisory
Mailing List
https://www.debian.org/security/2019/dsa-4529
Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/35
Third Party Advisory
Mailing List
https://www.debian.org/security/2019/dsa-4527
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Oct/15
Third Party Advisory
Mailing List
https://bugs.php.net/bug.php?id=78222
Patch
Vendor Advisory
Exploit
https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html
Third Party Advisory
Mailing List
https://seclists.org/bugtraq/2019/Oct/9
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20190822-0003/
Third Party Advisory
https://usn.ubuntu.com/4097-1/
Third Party Advisory
https://usn.ubuntu.com/4097-2/
Third Party Advisory