CVE-2019-9675

An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phartarwriteheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.

Database specific

{
    "unresolved_ranges": [
        {
            "vendor_product": "canonical:ubuntu_linux",
            "extracted_events": [
                {
                    "last_affected": "12.04"
                },
                {
                    "last_affected": "14.04"
                }
            ],
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"
            ],
            "source": "CPE_STRING"
        },
        {
            "vendor_product": "opensuse:leap",
            "extracted_events": [
                {
                    "last_affected": "42.3"
                }
            ],
            "cpes": [
                "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        }
    ]
}

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type

GIT

Repo

https://github.com/php/php-src

Events

Introduced

60fffd296abce5fc071f3c173c25a2696cf683c6

Fixed

2e280a77845f3ca94ef19a1872106c52ad1cf4e3

Introduced

52ace952a1b65ca80fc2617f11c2fa6dd03f51bd

Fixed

9ebd7f36b1bcbb2b425ab8e903846f3339d6d566

Database specific

{
    "extracted_events": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.1.27"
        },
        {
            "introduced": "7.3.0"
        },
        {
            "fixed": "7.3.3"
        }
    ],
    "cpe": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9675.json"