Lucene search
HannoH1:477897HistoryJan 11, 2019 - 10:11 a.m.
Internet Bug Bounty: buffer overread in base64 code of the xmlrpc module
2019-01-1110:11:55
hanno
hackerone.com
$500
55
0.011 Low
EPSS
Percentile
84.8%
Malformed input to the xmlrpc_decode function can cause an out of bounds read in the base64 code.
This is fixed in the latest updates of PHP (7.3.1 etc.)
Report:
https://bugs.php.net/bug.php?id=77380
Impact
If the attacker has access to the decoded output this may leak memory contents.
Related
prion
prion
Design/Logic Flaw
2019-02-22 23:29:00
alpinelinux
alpinelinux
CVE-2019-9024
2019-02-22 23:29:00
ubuntucve
ubuntucve
CVE-2019-9024
2019-02-22 00:00:00
osv
osv
CVE-2019-9024
2019-02-22 23:29:00
php7.0 - security update
2019-02-28 00:00:00
php5 - security update
2019-02-16 00:00:00
cve
cve
CVE-2019-9024
2019-02-22 23:29:00
redhatcve
redhatcve
CVE-2019-9024
2020-03-15 19:46:40
veracode
veracode
Information Disclosure
2019-08-20 00:10:43
cvelist
cvelist
CVE-2019-9024
2019-02-22 23:00:00
nvd
nvd
CVE-2019-9024
2019-02-22 23:29:00
debiancve
debiancve
CVE-2019-9024
2019-02-22 23:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1264)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3902-2)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-4398-1)
2019-02-27 00:00:00
nessus
nessus
EulerOS Virtualization 2.5.3 : php (EulerOS-SA-2019-1264)
2019-04-04 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : php Multiple Vulnerabilities (NS-SA-2020-0059)
2020-12-09 00:00:00
CentOS 7 : php (CESA-2020:1112)
2020-04-10 00:00:00
redhat
redhat
(RHSA-2020:1112) Moderate: php security update
2020-03-31 09:20:14
(RHSA-2020:1624) Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
(RHSA-2019:3299) Critical: rh-php72-php security update
2019-11-01 12:22:19
ubuntu
ubuntu
PHP vulnerabilities
2019-03-12 00:00:00
PHP vulnerabilities
2019-03-06 00:00:00
centos
centos
php security update
2020-04-08 19:04:38
debian
debian
[SECURITY] [DSA 4398-1] php7.0 security update
2019-02-28 22:04:23
oraclelinux
oraclelinux
php security update
2020-04-06 00:00:00
php:7.2 security, bug fix, and enhancement update
2020-05-05 00:00:00
suse
suse
Security update for php5 (moderate)
2019-04-23 00:00:00
Security update for php7 (moderate)
2019-04-29 00:00:00
Security update for php7 (moderate)
2019-06-18 00:00:00
ibm
ibm
almalinux
almalinux
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
rocky
rocky
php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45