Lucene search
HannoH1:477896HistoryJan 11, 2019 - 10:10 a.m.
Internet Bug Bounty: Use after free and out of bounds read in xmlrpc_decode()
2019-01-1110:10:08
hanno
hackerone.com
$1500
44
0.004 Low
EPSS
Percentile
73.2%
Malformed input can lead to use after free and out of bounds memory errors.
This has been fixed with the latest updates of PHP (7.1.26/7.2.14/7.3.1).
(Note: I reported those as separate bugs to PHP, but they had the same underlying bug and were fixed by the same commit. The release notes only mention “out of bounds read”, but this is misleading, as a use after free error is potentially more severe.)
Bugs reported to PHP:
https://bugs.php.net/bug.php?id=77242
https://bugs.php.net/bug.php?id=77249
Impact
If the xmlrpc functionality of PHP is used to parse untrusted input from a public API point it can potentially be used to gain code execution.
Related
alpinelinux
alpinelinux
CVE-2019-9020
2019-02-22 23:29:00
cve
cve
CVE-2019-9020
2019-02-22 23:29:00
debiancve
debiancve
CVE-2019-9020
2019-02-22 23:29:00
prion
prion
Heap overflow
2019-02-22 23:29:00
ubuntucve
ubuntucve
CVE-2019-9020
2019-02-22 00:00:00
nvd
nvd
CVE-2019-9020
2019-02-22 23:29:00
f5
f5
K37681312 : PHP vulnerability CVE-2019-9020
2020-03-16 00:00:00
osv
osv
CVE-2019-9020
2019-02-22 23:29:00
php7.0 - security update
2019-02-28 00:00:00
php5 - security update
2019-02-16 00:00:00
cvelist
cvelist
CVE-2019-9020
2019-02-22 23:00:00
redhatcve
redhatcve
CVE-2019-9020
2020-04-04 17:25:41
veracode
veracode
Arbitrary Code Execution
2019-08-20 00:10:42
nessus
nessus
EulerOS Virtualization 2.5.3 : php (EulerOS-SA-2019-1265)
2019-04-04 00:00:00
Debian DSA-4398-1 : php7.0 - security update
2019-03-01 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3902-1)
2019-03-07 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1265)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3902-2)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-4398-1)
2019-02-27 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2019-03-12 00:00:00
PHP vulnerabilities
2019-03-06 00:00:00
debian
debian
[SECURITY] [DSA 4398-1] php7.0 security update
2019-02-28 22:04:23
suse
suse
Security update for php5 (moderate)
2019-04-23 00:00:00
Security update for php7 (moderate)
2019-04-29 00:00:00
Security update for php7 (moderate)
2019-06-18 00:00:00
ibm
ibm
oraclelinux
oraclelinux
php:7.2 security, bug fix, and enhancement update
2020-05-05 00:00:00
almalinux
almalinux
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
redhat
redhat
(RHSA-2020:1624) Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
(RHSA-2019:3299) Critical: rh-php72-php security update
2019-11-01 12:22:19
rocky
rocky
php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45