CVE-2019-11046

Published Dec 23, 2019

Last updated 2 months ago

Overview

Description
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can read to disclosure of the content of some memory locations.
Source
security@php.net
NVD status
Modified
Products
php, debian_linux, fedora, leap, ubuntu_linux, security_center

Risk scores

CVSS 3.1

Type
Primary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

security@php.net
CWE-125
nvd@nist.gov
CWE-125

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.