CVE-2019-11041

moderate-risk
Published 2019-08-09

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.

Do I need to act?

~
3.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.1/10 High
NETWORK / LOW complexity

Affected Products (13)

Php

Affected Vendors

Debian Redhat Apple Php Canonical Opensuse Tenable

References (34)

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html
Mailing List http://seclists.org/fulldisclosure/2019/Oct/15
Mailing List http://seclists.org/fulldisclosure/2019/Oct/55
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3299
Exploit https://bugs.php.net/bug.php?id=78222
Mailing List https://lists.debian.org/debian-lts-announce/2019/08/msg00010.html
Mailing List https://seclists.org/bugtraq/2019/Oct/9
Mailing List https://seclists.org/bugtraq/2019/Sep/35
Mailing List https://seclists.org/bugtraq/2019/Sep/38
Third Party Advisory https://security.netapp.com/advisory/ntap-20190822-0003/
Third Party Advisory https://support.apple.com/kb/HT210634
Third Party Advisory https://support.apple.com/kb/HT210722
Third Party Advisory https://usn.ubuntu.com/4097-1/
Third Party Advisory https://usn.ubuntu.com/4097-2/
Third Party Advisory https://www.debian.org/security/2019/dsa-4527
Third Party Advisory https://www.debian.org/security/2019/dsa-4529
Third Party Advisory https://www.tenable.com/security/tns-2021-14
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00019.html
Mailing List http://seclists.org/fulldisclosure/2019/Oct/15
Mailing List http://seclists.org/fulldisclosure/2019/Oct/55
and 14 more references
49
/ 100
moderate-risk
Severity 25/34 · High
Exploitability 7/34 · Low
Exposure 17/34 · Moderate