NetSight
IP …
critical9.1

CVE-2019-11039

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer…

Impact

Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.

Affected products

VendorProductAffected versions
PhpPhp
from 7.1.0 before 7.1.30
from 7.2.0 before 7.2.19
from 7.3.0 before 7.3.6
RedhatSoftware Collections
Version 1.0
OpensuseLeap
Versions 15.0, 15.1
DebianDebian Linux
Versions 9.0, 10.0

Weakness classification

CWE-125CWE-190

References