Vulnérabilités / CVE-2019-11035

critique

CVE-2019-11035

php: Heap buffer overflow in function exif_iif_add_value()

Publiée Modifiée CWE 125
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon AlmaLinux (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne), Red Hat (faible), Amazon (faible).

Description

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
alma 8php:7.2::apcu-panel, php:7.2::libzip, php:7.2::libzip-devel et 32 autres5.1.12-2.module_el8.3.0+2010+7c76a223 et 4 autres
alpine 3.10php77.2.17-r0
alpine 3.11php77.2.17-r0
alpine 3.12php77.2.17-r0
alpine 3.13php77.2.17-r0
alpine 3.14php77.2.17-r0
alpine 3.15php77.2.17-r0
alpine 3.7php77.1.29-r0
alpine 3.8php77.2.17-r0
alpine 3.9php77.2.17-r0
amazon linux 1php71, php71-bcmath, php71-cli et 94 autres7.1.29-1.39.amzn1 et 2 autres
debian 8php55.6.40+dfsg-0+deb8u3
Afficher les 275 entrées de 23 sources
SourcePaquetCorrigé en
alma 8php:7.2::apcu-panel5.1.12-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::libzip1.5.1-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::libzip-devel1.5.1-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::libzip-tools1.5.1-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-bcmath7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-cli7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-common7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-dba7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-dbg7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-devel7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-embedded7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-enchant7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-fpm7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-gd7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-gmp7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-intl7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-json7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-ldap7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-mbstring7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-mysqlnd7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-odbc7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-opcache7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pdo7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pear1:1.10.5-9.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pecl-apcu5.1.12-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pecl-apcu-devel5.1.12-2.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pecl-zip1.15.3-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-pgsql7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-process7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-recode7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-snmp7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-soap7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-xml7.2.24-1.module_el8.3.0+2010+7c76a223
alma 8php:7.2::php-xmlrpc7.2.24-1.module_el8.3.0+2010+7c76a223
alpine 3.10php77.2.17-r0
alpine 3.11php77.2.17-r0
alpine 3.12php77.2.17-r0
alpine 3.13php77.2.17-r0
alpine 3.14php77.2.17-r0
alpine 3.15php77.2.17-r0
alpine 3.7php77.1.29-r0
alpine 3.8php77.2.17-r0
alpine 3.9php77.2.17-r0
amazon linux 1php717.1.29-1.39.amzn1
amazon linux 1php71-bcmath7.1.29-1.39.amzn1
amazon linux 1php71-cli7.1.29-1.39.amzn1
amazon linux 1php71-common7.1.29-1.39.amzn1
amazon linux 1php71-dba7.1.29-1.39.amzn1
amazon linux 1php71-dbg7.1.29-1.39.amzn1
amazon linux 1php71-debuginfo7.1.29-1.39.amzn1
amazon linux 1php71-devel7.1.29-1.39.amzn1
amazon linux 1php71-embedded7.1.29-1.39.amzn1
amazon linux 1php71-enchant7.1.29-1.39.amzn1
amazon linux 1php71-fpm7.1.29-1.39.amzn1
amazon linux 1php71-gd7.1.29-1.39.amzn1
amazon linux 1php71-gmp7.1.29-1.39.amzn1
amazon linux 1php71-imap7.1.29-1.39.amzn1
amazon linux 1php71-intl7.1.29-1.39.amzn1
amazon linux 1php71-json7.1.29-1.39.amzn1
amazon linux 1php71-ldap7.1.29-1.39.amzn1
amazon linux 1php71-mbstring7.1.29-1.39.amzn1
amazon linux 1php71-mcrypt7.1.29-1.39.amzn1
amazon linux 1php71-mysqlnd7.1.29-1.39.amzn1
amazon linux 1php71-odbc7.1.29-1.39.amzn1
amazon linux 1php71-opcache7.1.29-1.39.amzn1
amazon linux 1php71-pdo7.1.29-1.39.amzn1
amazon linux 1php71-pdo-dblib7.1.29-1.39.amzn1
amazon linux 1php71-pgsql7.1.29-1.39.amzn1
amazon linux 1php71-process7.1.29-1.39.amzn1
amazon linux 1php71-pspell7.1.29-1.39.amzn1
amazon linux 1php71-recode7.1.29-1.39.amzn1
amazon linux 1php71-snmp7.1.29-1.39.amzn1
amazon linux 1php71-soap7.1.29-1.39.amzn1
amazon linux 1php71-tidy7.1.29-1.39.amzn1
amazon linux 1php71-xml7.1.29-1.39.amzn1
amazon linux 1php71-xmlrpc7.1.29-1.39.amzn1
amazon linux 1php727.2.18-1.13.amzn1
amazon linux 1php72-bcmath7.2.18-1.13.amzn1
amazon linux 1php72-cli7.2.18-1.13.amzn1
amazon linux 1php72-common7.2.18-1.13.amzn1
amazon linux 1php72-dba7.2.18-1.13.amzn1
amazon linux 1php72-dbg7.2.18-1.13.amzn1
amazon linux 1php72-debuginfo7.2.18-1.13.amzn1
amazon linux 1php72-devel7.2.18-1.13.amzn1
amazon linux 1php72-embedded7.2.18-1.13.amzn1
amazon linux 1php72-enchant7.2.18-1.13.amzn1
amazon linux 1php72-fpm7.2.18-1.13.amzn1
amazon linux 1php72-gd7.2.18-1.13.amzn1
amazon linux 1php72-gmp7.2.18-1.13.amzn1
amazon linux 1php72-imap7.2.18-1.13.amzn1
amazon linux 1php72-intl7.2.18-1.13.amzn1
amazon linux 1php72-json7.2.18-1.13.amzn1
amazon linux 1php72-ldap7.2.18-1.13.amzn1
amazon linux 1php72-mbstring7.2.18-1.13.amzn1
amazon linux 1php72-mysqlnd7.2.18-1.13.amzn1
amazon linux 1php72-odbc7.2.18-1.13.amzn1
amazon linux 1php72-opcache7.2.18-1.13.amzn1
amazon linux 1php72-pdo7.2.18-1.13.amzn1
amazon linux 1php72-pdo-dblib7.2.18-1.13.amzn1
amazon linux 1php72-pgsql7.2.18-1.13.amzn1
amazon linux 1php72-process7.2.18-1.13.amzn1
amazon linux 1php72-pspell7.2.18-1.13.amzn1
amazon linux 1php72-recode7.2.18-1.13.amzn1
amazon linux 1php72-snmp7.2.18-1.13.amzn1
amazon linux 1php72-soap7.2.18-1.13.amzn1
amazon linux 1php72-tidy7.2.18-1.13.amzn1
amazon linux 1php72-xml7.2.18-1.13.amzn1
amazon linux 1php72-xmlrpc7.2.18-1.13.amzn1
amazon linux 1php737.3.5-1.15.amzn1
amazon linux 1php73-bcmath7.3.5-1.15.amzn1
amazon linux 1php73-cli7.3.5-1.15.amzn1
amazon linux 1php73-common7.3.5-1.15.amzn1
amazon linux 1php73-dba7.3.5-1.15.amzn1
amazon linux 1php73-dbg7.3.5-1.15.amzn1
amazon linux 1php73-debuginfo7.3.5-1.15.amzn1
amazon linux 1php73-devel7.3.5-1.15.amzn1
amazon linux 1php73-embedded7.3.5-1.15.amzn1
amazon linux 1php73-enchant7.3.5-1.15.amzn1
amazon linux 1php73-fpm7.3.5-1.15.amzn1
amazon linux 1php73-gd7.3.5-1.15.amzn1
amazon linux 1php73-gmp7.3.5-1.15.amzn1
amazon linux 1php73-imap7.3.5-1.15.amzn1
amazon linux 1php73-intl7.3.5-1.15.amzn1
amazon linux 1php73-json7.3.5-1.15.amzn1
amazon linux 1php73-ldap7.3.5-1.15.amzn1
amazon linux 1php73-mbstring7.3.5-1.15.amzn1
amazon linux 1php73-mysqlnd7.3.5-1.15.amzn1
amazon linux 1php73-odbc7.3.5-1.15.amzn1
amazon linux 1php73-opcache7.3.5-1.15.amzn1
amazon linux 1php73-pdo7.3.5-1.15.amzn1
amazon linux 1php73-pdo-dblib7.3.5-1.15.amzn1
amazon linux 1php73-pgsql7.3.5-1.15.amzn1
amazon linux 1php73-process7.3.5-1.15.amzn1
amazon linux 1php73-pspell7.3.5-1.15.amzn1
amazon linux 1php73-recode7.3.5-1.15.amzn1
amazon linux 1php73-snmp7.3.5-1.15.amzn1
amazon linux 1php73-soap7.3.5-1.15.amzn1
amazon linux 1php73-tidy7.3.5-1.15.amzn1
amazon linux 1php73-xml7.3.5-1.15.amzn1
amazon linux 1php73-xmlrpc7.3.5-1.15.amzn1
debian 8php55.6.40+dfsg-0+deb8u3
debian 9php7.07.0.33-0+deb9u5
Oracle Linux 8apcu-panel5.1.12-2.module+el8.2.0+5510+6771133c
Oracle Linux 8libzip1.5.1-2.module+el8.2.0+5510+6771133c
Oracle Linux 8libzip-devel1.5.1-2.module+el8.2.0+5510+6771133c
Oracle Linux 8libzip-tools1.5.1-2.module+el8.2.0+5510+6771133c
Oracle Linux 8php7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-bcmath7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-cli7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-common7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-dba7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-dbg7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-devel7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-embedded7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-enchant7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-fpm7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-gd7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-gmp7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-intl7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-json7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-ldap7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-mbstring7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-mysqlnd7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-odbc7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-opcache7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pdo7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pear1:1.10.5-9.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pecl-apcu5.1.12-2.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pecl-apcu-devel5.1.12-2.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pecl-zip1.15.3-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-pgsql7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-process7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-recode7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-snmp7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-soap7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-xml7.2.24-1.module+el8.2.0+5510+6771133c
Oracle Linux 8php-xmlrpc7.2.24-1.module+el8.2.0+5510+6771133c
Red Hatphppas de correctif indiqué
Red Hatphp-bcmathpas de correctif indiqué
Red Hatphp-clipas de correctif indiqué
Red Hatphp-commonpas de correctif indiqué
Red Hatphp-dbapas de correctif indiqué
Red Hatphp-develpas de correctif indiqué
Red Hatphp-embeddedpas de correctif indiqué
Red Hatphp-enchantpas de correctif indiqué
Red Hatphp-fpmpas de correctif indiqué
Red Hatphp-gdpas de correctif indiqué
Red Hatphp-imappas de correctif indiqué
Red Hatphp-intlpas de correctif indiqué
Red Hatphp-ldappas de correctif indiqué
Red Hatphp-mbstringpas de correctif indiqué
Red Hatphp-mysqlpas de correctif indiqué
Red Hatphp-mysqlndpas de correctif indiqué
Red Hatphp-odbcpas de correctif indiqué
Red Hatphp-pdopas de correctif indiqué
Red Hatphp-pgsqlpas de correctif indiqué
Red Hatphp-processpas de correctif indiqué
Red Hatphp-pspellpas de correctif indiqué
Red Hatphp-recodepas de correctif indiqué
Red Hatphp-snmppas de correctif indiqué
Red Hatphp-soappas de correctif indiqué
Red Hatphp-tidypas de correctif indiqué
Red Hatphp-xmlpas de correctif indiqué
Red Hatphp-xmlrpcpas de correctif indiqué
Red Hatphp-ztspas de correctif indiqué
rocky 8php7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-bcmath7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-cli7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-common7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-dba7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-dbg7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-devel7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-embedded7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-enchant7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-fpm7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-gd7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-gmp7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-intl7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-json7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-ldap7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-mbstring7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-mysqlnd7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-odbc7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-opcache7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-pdo7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-pgsql7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-process7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-recode7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-snmp7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-soap7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-xml7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php-xmlrpc7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::apcu-panel5.1.12-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::libzip1.5.1-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::libzip-devel1.5.1-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::libzip-tools1.5.1-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-bcmath7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-cli7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-common7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-dba7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-dbg7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-devel7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-embedded7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-enchant7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-fpm7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-gd7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-gmp7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-intl7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-json7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-ldap7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-mbstring7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-mysqlnd7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-odbc7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-opcache7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pdo7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pear1:1.10.5-9.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pecl-apcu5.1.12-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pecl-apcu-devel5.1.12-2.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pecl-zip1.15.3-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-pgsql7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-process7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-recode7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-snmp7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-soap7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-xml7.2.24-1.module+el8.4.0+413+c9202dda
rocky 8php:7.2::php-xmlrpc7.2.24-1.module+el8.4.0+413+c9202dda
ubuntu 14.04-ESMphp55.5.9+dfsg-1ubuntu4.29+esm1
ubuntu 16.04php7.07.0.33-0ubuntu0.16.04.4
ubuntu 16.04-ESMphp7.07.0.33-0ubuntu0.16.04.4
ubuntu 18.04php7.27.2.17-0ubuntu0.18.04.1
ubuntu 18.04-ESMphp7.27.2.17-0ubuntu0.18.04.1
ubuntu 18.10php7.27.2.17-0ubuntu0.18.10.1
ubuntu 19.04php7.27.2.17-0ubuntu0.19.04.1

Références

Les 57 références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.