CVE-2019-11038

Advisory lineage Upstream: 0 Downstream: 17
Modified
Published: 18 Jun 2019, 23:28
Last modified:16 Sept 2024, 21:04

Vulnerability Summary

Overall Risk (default)
medium
33/100
CVSS Score
5.3 MEDIUM
v3.1 (nvd)
EPSS Score
10.54% MEDIUM
11% probability -0.18%
KEV
Not listed
Ransomware
No reports
Public exploits
5 found
Dark Web
Not detected

Timeline

18 Jun 2019, 23:28
Published
Vulnerability first disclosed
16 Sept 2024, 21:04
Last Modified
Vulnerability information updated

Description

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  • v3.0•LOW•Score: 3.1CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 10.54%• Percentile: 93%

Techniques & Countermeasures

  • CWE-908•Use of Uninitialized Resource

    The product uses or accesses a resource that has not been initialized.

  • CWE-457•Use of Uninitialized Variable

    The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 19.10

  • debian•debian_linux

    8.0 | 9.0

  • fedoraproject•fedora

    29 | 30 | 32

  • libgd•libgd

    2.2.5

  • opensuse•leap

    15.1

  • Unknown•PHP

    7.1.x < 7.1.30 | 7.2.x < 7.2.19 | 7.3.x < 7.3.6

  • Unknown•PHP

    ≥ 7.1.0, < 7.1.30 | ≥ 7.2.0, < 7.2.19 | ≥ 7.3.0, < 7.3.6

  • redhat•enterprise_linux

    7.0 | 8.0

  • redhat•software_collections

    1.0

  • suse•linux_enterprise_debuginfo

    11:sp4

  • suse•linux_enterprise_desktop

    12:sp4

  • suse•linux_enterprise_server

    12:sp4 | 12:sp5

  • suse•linux_enterprise_software_development_kit

    12:sp4 | 12:sp5

  • suse•linux_enterprise_workstation_extension

    12:sp4 | 12:sp5

References (18)