CVE-2019-9020

CVE-2019-9020

Publicada el · Actualizada el

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 10%
probabilidad de explotación
10%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
Productos afectados
n/a · n/a
Referencias
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.htmlhttps://access.redhat.com/errata/RHSA-2019:2519https://access.redhat.com/errata/RHSA-2019:3299https://bugs.php.net/bug.php?id=77242https://bugs.php.net/bug.php?id=77249https://security.netapp.com/advisory/ntap-20190321-0001/https://usn.ubuntu.com/3902-1/https://usn.ubuntu.com/3902-2/https://www.debian.org/security/2019/dsa-4398