CVE-2019-11045

Опубликовано: 23 дек. 2019

Источник: nvd

CVSS3: 3.7

CVSS3: 5.9

CVSS2: 4.3

EPSS Средний

Описание

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html
Mailing List
Third Party Advisory
https://bugs.php.net/bug.php?id=78863
Exploit
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/
https://seclists.org/bugtraq/2020/Feb/27
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Feb/31
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2021/Jan/3
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200103-0002/
Third Party Advisory
https://usn.ubuntu.com/4239-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4626
Third Party Advisory
https://www.debian.org/security/2020/dsa-4628
Third Party Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00036.html
Mailing List
Third Party Advisory
https://bugs.php.net/bug.php?id=78863
Exploit
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00034.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/
https://seclists.org/bugtraq/2020/Feb/27
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Feb/31
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 7.2.0 (включая) до 7.2.26 (включая)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 7.3.0 (включая) до 7.3.13 (включая)

cpe:2.3:a:php:php:7.4.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:a:tenable:securitycenter:*:*:*:*:*:*:*:*

Версия до 5.19.0 (исключая)

EPSS

Процентиль: 97%

0.40595

Средний

3.7 Low

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-170

CWE-74

Связанные уязвимости

CVE-2019-11045

CVSS3: 3.7

ubuntu

больше 5 лет назад

CVE-2019-11045

CVSS3: 5.9

redhat

больше 5 лет назад

CVE-2019-11045

CVSS3: 3.7

debian

больше 5 лет назад

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP ...

GHSA-jv88-p4rw-4m4h

CVSS3: 5.9

github

около 3 лет назад

BDU:2020-01278

CVSS3: 3.7

fstec

больше 5 лет назад

Уязвимость реализации класса PHP DirectoryIterator интерпретатора языка программирования PHP, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 97%

0.40595

Средний

3.7 Low

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-170

CWE-74