CVE-2019-9675
published 2019-03-11CVE-2019-9675: An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link…
PriorityP347high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
6.02%
92.5th percentile
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| opensuse | leap | — | — |
| php | php | >= 7.0.0 < 7.1.27 | 7.1.27 |
| php | php | >= 7.3.0 < 7.3.3 | 7.3.3 |
| php5 | php5 | >= 0 < 5.5.9+dfsg-1ubuntu4.29 | 5.5.9+dfsg-1ubuntu4.29 |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.1HIGH
vendor_redhat8.1HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2019-04-25·CVSS 7.5
CVE-2019-9022 [HIGH] PHP vulnerabilities
Title: PHP vulnerabilities
Summary: Several security issues were fixed in PHP.
USN-3922-1 fixed several vulnerabilities in PHP. This update provides
the corresponding update for Ubuntu 12.04 ESM.
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to access sensitive information. (CVE-2019-9022)
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to execute arbitrary code. (CVE-2019-9675)
Original advisory details:
It was discovered that PHP incorrectly handled certain inputs. An attacker
could possibly use this issue to expose sensitive information. (CVE-2019-9637,
CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)
Instructions: In general, a standard system update will
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2019-04-23·CVSS 7.5
CVE-2019-9022 [HIGH] PHP vulnerabilities
Title: PHP vulnerabilities
Summary: Several security issues were fixed in PHP.
USN-3922-1 fixed vulnerabilities in PHP. This update provides the corresponding
update for Ubuntu 14.04 LTS.
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to access sensitive information.
(CVE-2019-9022)
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to execute arbitrary code.
(CVE-2019-9675)
Original advisory details:
It was discovered that PHP incorrectly handled certain inputs. An attacker
could possibly use this issue to expose sensitive information. (CVE-2019-9637,
CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)
Instructions: In general, a standard system update will make all
Red Hat
php: buffer overflow in ext/phar/tar.c
vendor_redhat·2019-02-08·CVSS 8.1
CVE-2019-9675 [HIGH] CWE-121 php: buffer overflow in ext/phar/tar.c
php: buffer overflow in ext/phar/tar.c
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.
Statement: Red Hat Product Security determined that this flaw was not a security vulnerability. See the Bugzilla link for more details.
Package: php (Red Hat Enterprise Linux 5) - Not affected
Package: php53 (Red Hat Enterprise Linux 5) - Not affected
Package: php (Red Hat Enterprise Linux 6) - Not affected
Package: php (Red Hat Enterprise Linux 7) - Not affected
GHSA
GHSA-pf47-4qf3-xq2x: ** DISPUTED ** An issue was discovered in PHP 7
ghsa_unreviewed·2022-05-14
CVE-2019-9675 [HIGH] CWE-119 GHSA-pf47-4qf3-xq2x: ** DISPUTED ** An issue was discovered in PHP 7
** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible."
OSV
php5 vulnerabilities
osv·2019-04-23·CVSS 7.5
CVE-2019-9022 [HIGH] php5 vulnerabilities
php5 vulnerabilities
USN-3922-1 fixed vulnerabilities in PHP. This update provides the corresponding
update for Ubuntu 14.04 LTS.
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to access sensitive information.
(CVE-2019-9022)
It was discovered that PHP incorrectly handled certain files. An attacker
could possibly use this issue to execute arbitrary code.
(CVE-2019-9675)
Original advisory details:
It was discovered that PHP incorrectly handled certain inputs. An attacker
could possibly use this issue to expose sensitive information. (CVE-2019-9637,
CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641)
OSV
CVE-2019-9675: An issue was discovered in PHP 7
osv·2019-03-11·CVSS 8.1
CVE-2019-9675 [HIGH] CVE-2019-9675: An issue was discovered in PHP 7
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.htmlhttp://php.net/ChangeLog-7.phphttps://bugs.php.net/bug.php?id=77586https://usn.ubuntu.com/3922-2/https://usn.ubuntu.com/3922-3/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.htmlhttp://php.net/ChangeLog-7.phphttps://bugs.php.net/bug.php?id=77586https://usn.ubuntu.com/3922-2/https://usn.ubuntu.com/3922-3/
2019-03-11
Published