CVE-2019-11035
php: Heap buffer overflow in function exif_iif_add_value()
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon AlmaLinux (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne), Red Hat (faible), Amazon (faible).
Description
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | php:7.2::apcu-panel, php:7.2::libzip, php:7.2::libzip-devel et 32 autres | 5.1.12-2.module_el8.3.0+2010+7c76a223 et 4 autres |
| alpine 3.10 | php7 | 7.2.17-r0 |
| alpine 3.11 | php7 | 7.2.17-r0 |
| alpine 3.12 | php7 | 7.2.17-r0 |
| alpine 3.13 | php7 | 7.2.17-r0 |
| alpine 3.14 | php7 | 7.2.17-r0 |
| alpine 3.15 | php7 | 7.2.17-r0 |
| alpine 3.7 | php7 | 7.1.29-r0 |
| alpine 3.8 | php7 | 7.2.17-r0 |
| alpine 3.9 | php7 | 7.2.17-r0 |
| amazon linux 1 | php71, php71-bcmath, php71-cli et 94 autres | 7.1.29-1.39.amzn1 et 2 autres |
| debian 8 | php5 | 5.6.40+dfsg-0+deb8u3 |
Afficher les 275 entrées de 23 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | php:7.2::apcu-panel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-devel | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::libzip-tools | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-bcmath | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-cli | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-common | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dba | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-dbg | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-devel | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-embedded | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-enchant | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-fpm | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-gmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-intl | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-json | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-ldap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mbstring | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-mysqlnd | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-odbc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-opcache | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pdo | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pear | 1:1.10.5-9.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pecl-zip | 1.15.3-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-pgsql | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-process | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-recode | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-snmp | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-soap | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xml | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alma 8 | php:7.2::php-xmlrpc | 7.2.24-1.module_el8.3.0+2010+7c76a223 |
| alpine 3.10 | php7 | 7.2.17-r0 |
| alpine 3.11 | php7 | 7.2.17-r0 |
| alpine 3.12 | php7 | 7.2.17-r0 |
| alpine 3.13 | php7 | 7.2.17-r0 |
| alpine 3.14 | php7 | 7.2.17-r0 |
| alpine 3.15 | php7 | 7.2.17-r0 |
| alpine 3.7 | php7 | 7.1.29-r0 |
| alpine 3.8 | php7 | 7.2.17-r0 |
| alpine 3.9 | php7 | 7.2.17-r0 |
| amazon linux 1 | php71 | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-bcmath | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-cli | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-common | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-dba | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-dbg | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-debuginfo | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-devel | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-embedded | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-enchant | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-fpm | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-gd | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-gmp | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-imap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-intl | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-json | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-ldap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mbstring | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mcrypt | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-mysqlnd | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-odbc | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-opcache | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pdo | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pdo-dblib | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pgsql | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-process | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-pspell | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-recode | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-snmp | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-soap | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-tidy | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-xml | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php71-xmlrpc | 7.1.29-1.39.amzn1 |
| amazon linux 1 | php72 | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-bcmath | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-cli | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-common | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-dba | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-dbg | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-debuginfo | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-devel | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-embedded | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-enchant | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-fpm | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-gd | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-gmp | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-imap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-intl | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-json | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-ldap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-mbstring | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-mysqlnd | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-odbc | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-opcache | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pdo | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pdo-dblib | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pgsql | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-process | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-pspell | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-recode | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-snmp | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-soap | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-tidy | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-xml | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php72-xmlrpc | 7.2.18-1.13.amzn1 |
| amazon linux 1 | php73 | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-bcmath | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-cli | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-common | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-dba | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-dbg | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-debuginfo | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-devel | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-embedded | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-enchant | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-fpm | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-gd | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-gmp | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-imap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-intl | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-json | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-ldap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-mbstring | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-mysqlnd | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-odbc | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-opcache | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pdo | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pdo-dblib | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pgsql | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-process | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-pspell | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-recode | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-snmp | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-soap | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-tidy | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-xml | 7.3.5-1.15.amzn1 |
| amazon linux 1 | php73-xmlrpc | 7.3.5-1.15.amzn1 |
| debian 8 | php5 | 5.6.40+dfsg-0+deb8u3 |
| debian 9 | php7.0 | 7.0.33-0+deb9u5 |
| Oracle Linux 8 | apcu-panel | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip-devel | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | libzip-tools | 1.5.1-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-bcmath | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-cli | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-common | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-dba | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-dbg | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-devel | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-embedded | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-enchant | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-fpm | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-gd | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-gmp | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-intl | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-json | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-ldap | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-mbstring | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-mysqlnd | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-odbc | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-opcache | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pdo | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pear | 1:1.10.5-9.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-apcu | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.12-2.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pecl-zip | 1.15.3-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-pgsql | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-process | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-recode | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-snmp | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-soap | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-xml | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Oracle Linux 8 | php-xmlrpc | 7.2.24-1.module+el8.2.0+5510+6771133c |
| Red Hat | php | pas de correctif indiqué |
| Red Hat | php-bcmath | pas de correctif indiqué |
| Red Hat | php-cli | pas de correctif indiqué |
| Red Hat | php-common | pas de correctif indiqué |
| Red Hat | php-dba | pas de correctif indiqué |
| Red Hat | php-devel | pas de correctif indiqué |
| Red Hat | php-embedded | pas de correctif indiqué |
| Red Hat | php-enchant | pas de correctif indiqué |
| Red Hat | php-fpm | pas de correctif indiqué |
| Red Hat | php-gd | pas de correctif indiqué |
| Red Hat | php-imap | pas de correctif indiqué |
| Red Hat | php-intl | pas de correctif indiqué |
| Red Hat | php-ldap | pas de correctif indiqué |
| Red Hat | php-mbstring | pas de correctif indiqué |
| Red Hat | php-mysql | pas de correctif indiqué |
| Red Hat | php-mysqlnd | pas de correctif indiqué |
| Red Hat | php-odbc | pas de correctif indiqué |
| Red Hat | php-pdo | pas de correctif indiqué |
| Red Hat | php-pgsql | pas de correctif indiqué |
| Red Hat | php-process | pas de correctif indiqué |
| Red Hat | php-pspell | pas de correctif indiqué |
| Red Hat | php-recode | pas de correctif indiqué |
| Red Hat | php-snmp | pas de correctif indiqué |
| Red Hat | php-soap | pas de correctif indiqué |
| Red Hat | php-tidy | pas de correctif indiqué |
| Red Hat | php-xml | pas de correctif indiqué |
| Red Hat | php-xmlrpc | pas de correctif indiqué |
| Red Hat | php-zts | pas de correctif indiqué |
| rocky 8 | php | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-bcmath | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-cli | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-common | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-dba | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-dbg | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-devel | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-embedded | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-enchant | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-fpm | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-gd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-gmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-intl | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-json | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-ldap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-mbstring | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-mysqlnd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-odbc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-opcache | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-pdo | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-pgsql | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-process | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-recode | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-snmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-soap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-xml | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php-xmlrpc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::apcu-panel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-devel | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::libzip-tools | 1.5.1-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-bcmath | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-cli | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-common | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dba | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-dbg | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-devel | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-embedded | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-enchant | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-fpm | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-gmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-intl | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-json | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-ldap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mbstring | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-mysqlnd | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-odbc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-opcache | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pdo | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pear | 1:1.10.5-9.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-apcu-devel | 5.1.12-2.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pecl-zip | 1.15.3-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-pgsql | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-process | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-recode | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-snmp | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-soap | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xml | 7.2.24-1.module+el8.4.0+413+c9202dda |
| rocky 8 | php:7.2::php-xmlrpc | 7.2.24-1.module+el8.4.0+413+c9202dda |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.29+esm1 |
| ubuntu 16.04 | php7.0 | 7.0.33-0ubuntu0.16.04.4 |
| ubuntu 16.04-ESM | php7.0 | 7.0.33-0ubuntu0.16.04.4 |
| ubuntu 18.04 | php7.2 | 7.2.17-0ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | php7.2 | 7.2.17-0ubuntu0.18.04.1 |
| ubuntu 18.10 | php7.2 | 7.2.17-0ubuntu0.18.10.1 |
| ubuntu 19.04 | php7.2 | 7.2.17-0ubuntu0.19.04.1 |
Références
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html
- https://access.redhat.com/errata/RHSA-2019:2519
- https://access.redhat.com/errata/RHSA-2019:3299
- https://access.redhat.com/security/cve/CVE-2019-11035
- https://bugs.php.net/bug.php?id=77831
Les 57 références
- https://bugzilla.redhat.com/show_bug.cgi?id=1680545
- https://bugzilla.redhat.com/show_bug.cgi?id=1685123
- https://bugzilla.redhat.com/show_bug.cgi?id=1685132
- https://bugzilla.redhat.com/show_bug.cgi?id=1685398
- https://bugzilla.redhat.com/show_bug.cgi?id=1685404
- https://bugzilla.redhat.com/show_bug.cgi?id=1685412
- https://bugzilla.redhat.com/show_bug.cgi?id=1688897
- https://bugzilla.redhat.com/show_bug.cgi?id=1688922
- https://bugzilla.redhat.com/show_bug.cgi?id=1688934
- https://bugzilla.redhat.com/show_bug.cgi?id=1688939
- https://bugzilla.redhat.com/show_bug.cgi?id=1702246
- https://bugzilla.redhat.com/show_bug.cgi?id=1702256
- https://bugzilla.redhat.com/show_bug.cgi?id=1707299
- https://bugzilla.redhat.com/show_bug.cgi?id=1724152
- https://bugzilla.redhat.com/show_bug.cgi?id=1724154
- https://bugzilla.redhat.com/show_bug.cgi?id=1739459
- https://bugzilla.redhat.com/show_bug.cgi?id=1739465
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20783
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11034
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11035
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11036
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9020
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9021
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9022
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9023
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9024
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9637
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9638
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9639
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9640
- https://errata.almalinux.org/8/ALSA-2020-1624.html
- https://errata.rockylinux.org/RLSA-2020:1624
- https://linux.oracle.com/cve/CVE-2019-11035.html
- https://linux.oracle.com/errata/ELSA-2020-1624.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-11035
- https://seclists.org/bugtraq/2019/Sep/38
- https://security.netapp.com/advisory/ntap-20190502-0001/
- https://support.f5.com/csp/article/K44590877
- https://ubuntu.com/security/notices/USN-3953-1
- https://ubuntu.com/security/notices/USN-3953-2
- https://usn.ubuntu.com/3953-1/
- https://usn.ubuntu.com/3953-2/
- https://www.cve.org/CVERecord?id=CVE-2019-11035
- https://www.debian.org/security/2019/dsa-4529