Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2019-11049
HistoryDec 23, 2019 - 3:15 a.m.

CVE-2019-11049

2019-12-2303:15:00
Debian Security Bug Tracker
security-tracker.debian.org
7

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.4%

JSON

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.

OSVersionArchitecturePackageVersionFilename
Debian10allphp7.3< 7.3.31-1~deb10u1php7.3_7.3.31-1~deb10u1_all.deb

Related

cve 1
prion 1
ubuntucve 1
symantec 1
redhatcve 1
altlinux 3
openvas 5
mageia 1
fedora 2
nessus 13
amazon 3
debian 1
cve
cve
CVE-2019-11049
2019-12-23 03:15:00
prion
prion
Double free
2019-12-23 03:15:00
ubuntucve
ubuntucve
CVE-2019-11049
2019-12-23 00:00:00
symantec
symantec
PHP CVE-2019-11049 Remote Denial Of Service Vulnerability
2019-12-18 00:00:00
redhatcve
redhatcve
CVE-2019-11049
2020-04-05 05:17:59
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.1 version 7.3.13-alt1
2019-12-20 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 7.3.13-alt1
2019-12-20 00:00:00
Security fix for the ALT Linux 9 package php7 version 7.3.13-alt1
2019-12-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0412)
2022-01-28 00:00:00
PHP Multiple Vulnerabilities (Dec 2019) - Linux
2019-12-19 00:00:00
Fedora Update for php FEDORA-2019-437d94e271
2020-01-08 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2019-12-25 22:08:41
fedora
fedora
[SECURITY] Fedora 30 Update: php-7.3.13-1.fc30
2020-01-03 20:36:41
[SECURITY] Fedora 31 Update: php-7.3.13-1.fc31
2020-01-05 00:42:40
nessus
nessus
Fedora 30 : php (2019-437d94e271)
2020-01-06 00:00:00
Amazon Linux AMI : php72 / php73 (ALAS-2020-1339)
2020-02-10 00:00:00
Fedora 31 : php (2019-a54a622670)
2020-01-06 00:00:00
amazon
amazon
Medium: php72, php73
2020-02-04 22:42:00
Important: php73
2024-02-01 19:33:00
Important: php72
2024-02-14 20:03:00
debian
debian
[SECURITY] [DSA 4626-1] php7.3 security update
2020-02-17 20:39:09

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.4%

JSON
Related for DEBIANCVE:CVE-2019-11049
cve1prion1ubuntucve1symantec1redhatcve1altlinux3openvas5mageia1fedora2nessus13amazon3debian1