Lucene search
PRIOn knowledge basePRION:CVE-2019-11044HistoryDec 23, 2019 - 3:15 a.m.
Design/Logic Flaw
2019-12-2303:15:00
PRIOn knowledge base
www.prio-n.com
7
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
References
bugs.php.net/bug.php?id=78862
lists.fedoraproject.org/archives/list/[email protected]/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/
lists.fedoraproject.org/archives/list/[email protected]/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/
security.netapp.com/advisory/ntap-20200103-0002/
www.tenable.com/security/tns-2021-14
Related
ubuntucve
ubuntucve
CVE-2019-11044
2019-12-23 00:00:00
debiancve
debiancve
CVE-2019-11044
2019-12-23 03:15:10
nvd
nvd
CVE-2019-11044
2019-12-23 03:15:10
hackerone
hackerone
cve
cve
CVE-2019-11044
2019-12-23 03:15:10
symantec
symantec
PHP CVE-2019-11044 Multiple Unspecified Security Vulnerabilities
2019-12-16 00:00:00
cvelist
cvelist
CVE-2019-11044 link() silently truncates after a null byte on Windows
2019-12-17 00:00:00
redhatcve
redhatcve
CVE-2019-11044
2020-03-28 20:00:41
ibm
ibm
openvas
openvas
PHP < 7.2.26 Multiple Vulnerabilities (Dec 2019) - Windows
2019-12-19 00:00:00
Fedora Update for php FEDORA-2019-437d94e271
2020-01-08 00:00:00
Fedora Update for php FEDORA-2019-a54a622670
2020-01-09 00:00:00
nessus
nessus
PHP 7.2.x < 7.2.26 Multiple Vulnerabilities
2020-01-10 00:00:00
PHP 7.2.x < 7.2.26 Multiple Vulnerabilities
2020-01-24 00:00:00
PHP 7.4.x < 7.4.1 Multiple Vulnerabilities
2020-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: php-7.3.13-1.fc30
2020-01-03 20:36:41
[SECURITY] Fedora 31 Update: php-7.3.13-1.fc31
2020-01-05 00:42:40
amazon
amazon
Medium: php72, php73
2020-02-04 22:42:00
Important: php72
2024-02-14 20:03:00
Important: php73
2024-02-01 19:33:00