PHP Multiple Heap Buffer Overflow Vulnerabilities

Bugtraq ID:	107794
Class:	Boundary Condition Error
CVE:	CVE-2019-11035 CVE-2019-11034
Remote:	Yes
Local:	No
Published:	Apr 04 2019 12:00AM
Updated:	Apr 22 2019 03:00AM
Credit:	The vendor reported this issue.
Vulnerable:	PHP PHP 7.3.3 PHP PHP 7.3.2 PHP PHP 7.3.1 PHP PHP 7.3 PHP PHP 7.2.16 PHP PHP 7.2.14 PHP PHP 7.2.13 PHP PHP 7.2.12 PHP PHP 7.2.8 PHP PHP 7.2.7 PHP PHP 7.2.6 PHP PHP 7.2.5 PHP PHP 7.2.4 PHP PHP 7.2.3 PHP PHP 7.2.2 PHP PHP 7.2.1 PHP PHP 7.2 PHP PHP 7.1.27 PHP PHP 7.1.26 PHP PHP 7.1.25 PHP PHP 7.1.24 PHP PHP 7.1.20 PHP PHP 7.1.17 PHP PHP 7.1.16 PHP PHP 7.1.13 PHP PHP 7.1.12 PHP PHP 7.1.11 PHP PHP 7.1.8 PHP PHP 7.1.7 PHP PHP 7.1.6 PHP PHP 7.1.5 PHP PHP 7.1.4 PHP PHP 7.1.1 PHP PHP 7.1 PHP PHP 7.1.3 PHP PHP 7.1.2 PHP PHP 7.1.14
Not Vulnerable:	PHP PHP 7.3.4 PHP PHP 7.2.17 PHP PHP 7.1.28

PHP Multiple Heap Buffer Overflow Vulnerabilities

PHP is prone to multiple heap-based buffer-overflow vulnerabilities.

An attacker can exploit these issues to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions.

Versions prior to PHP 7.1.28, 7.2.17, and 7.3.4 are vulnerable.

PHP Multiple Heap Buffer Overflow Vulnerabilities

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

PHP Multiple Heap Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHP Multiple Heap Buffer Overflow Vulnerabilities

References:

• #77753 Heap-buffer-overflow in php_ifd_get32s (PHP)
  
• #77831 Heap-buffer-overflow in exif_iif_add_value in EXIF (PHP)
  
• PHP 7 ChangeLog (PHP)
  
• PHP Homepage (PHP)