CVE-2019-11038

high-risk

Published 2019-06-19

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

Do I need to act?

10.5% chance of exploitation in next 30 days

EPSS score — higher than 89% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

NETWORK / LOW complexity

Affected Products (20)

Libgd

Php

Ubuntu Linux

Debian Linux

Fedora

Linux Enterprise Debuginfo

Leap

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Affected Vendors

Debian Redhat Suse Php Canonical Fedoraproject Opensuse Libgd

References (36)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:2519

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3299

Mailing List https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821

Vendor Advisory https://bugs.php.net/bug.php?id=77973

Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1724149

Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1724432

Exploit https://bugzilla.suse.com/show_bug.cgi?id=1140118

Exploit https://bugzilla.suse.com/show_bug.cgi?id=1140120

Exploit https://github.com/libgd/libgd/issues/501

Mailing List https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Mailing List https://seclists.org/bugtraq/2019/Sep/38

Third Party Advisory https://usn.ubuntu.com/4316-1/

Third Party Advisory https://usn.ubuntu.com/4316-2/

Third Party Advisory https://www.debian.org/security/2019/dsa-4529

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:2519

and 16 more references

/ 100

high-risk

Severity 21/34 · High

Exploitability 11/34 · Low

Exposure 21/34 · High