PT-2019-4739 · Php +7 · Php +7

🗓️ 21 Dec 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

PHP EXIF exif_read_data can read past the buffer, causing disclosure or a crash.

Reporter	Title	Published	Views	Family All 3911
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabiltiies in PHP.	27 Jan 202016:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect's Developer Portal is impacted by vulnerabilities in PHP (CVE-2019-11035 CVE-2019-11034)	23 May 201900:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect V5 is vulnerable to denial of service (PHP CVE-2019-11048)	27 Jul 202019:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in PHP (CVE-2018-14851 CVE-2017-9118)	15 Apr 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in php (CVE-2018-10548 CVE-2018-12882)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)	16 Dec 202217:01	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_fpm_rce.rb
github	www.github.com/theMiddleBlue/CVE-2019-11043
github	www.github.com/jas502n/CVE-2019-11043
github	www.github.com/akamajoris/CVE-2019-11043-Docker
github	www.github.com/k8gege/CVE-2019-11043
github	www.github.com/0th3rs-Security-Team/CVE-2019-11043
github	www.github.com/kriskhub/CVE-2019-11043
github	www.github.com/ypereirareis/docker-CVE-2019-11043
github	www.github.com/AleWong/PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-
github	www.github.com/amitlttwo/CVE-2022-31626

20 Dec 2022 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.4 - 7.5

CVSS 35.1 - 9.8

CVSS 3.19.8

EPSS0.99407

SSVC