CVE-2019-11046
Buffer underflow in bc_shift_addsub
- State
- Published
- Severity
- 3.7 Low
- Published
- Dec 23, 2019
- Updated
- Sep 16, 2024
- Reserved
- Apr 9, 2019
Description
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | php |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
PHPPHP Group |
|
References
- https://bugs.php.net/bug.php?id=78878
- [debian-lts-announce] 20191229 [SECURITY] [DLA 2050-1] php5 security updatemailing-list
- https://security.netapp.com/advisory/ntap-20200103-0002/
- FEDORA-2019-437d94e271vendor-advisory
- FEDORA-2019-a54a622670vendor-advisory
- https://support.f5.com/csp/article/K48866433?utm_source=f5support&%3Butm_medium=RSS
- USN-4239-1vendor-advisory
- openSUSE-SU-2020:0080vendor-advisory
- 20200218 [SECURITY] [DSA 4626-1] php7.3 security updatemailing-list
- DSA-4626vendor-advisory
- DSA-4628vendor-advisory
- 20200219 [SECURITY] [DSA 4628-1] php7.0 security updatemailing-list
- 20210116 Re: [SECURITY] [DSA 4628-1] php7.0 security updatemailing-list
- https://www.tenable.com/security/tns-2021-14
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.