Detections
Analytics
CVE-2019-11035
critical
Description
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
References
https://www.debian.org/security/2019/dsa-4529
https://usn.ubuntu.com/3953-2/
https://usn.ubuntu.com/3953-1/
https://support.f5.com/csp/article/K44590877
https://security.netapp.com/advisory/ntap-20190502-0001/
https://seclists.org/bugtraq/2019/Sep/38
https://lists.debian.org/debian-lts-announce/2019/05/msg00035.html
https://access.redhat.com/errata/RHSA-2019:3299
https://access.redhat.com/errata/RHSA-2019:2519
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html