Critical Buffer Overflow Vulnerability in PHP EXIF Extension - CVE-2019-11041
Summary
UBUNTU-CVE-2019-11041: When PHP EXIF extension is parsing EXIF information from an image, e.g. Affects php5 versions < 5.5.9+dfsg-1ubuntu4.29+esm5. Fixed in 5.5.9+dfsg-1ubuntu4.29+esm5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PHP is a widely-used open-source scripting language designed for web development but also used as a general-purpose programming language. The PHP EXIF extension allows for the reading of EXIF headers from image files, which is essential for applications that handle image uploads and processing. This extension is crucial for extracting metadata from images, such as camera settings and orientation. However, certain versions of PHP are vulnerable to a buffer overflow issue in the EXIF parsing functionality, which can lead to severe security risks.
Vulnerability Detail
The vulnerability, identified as CVE-2019-11041, arises when the PHP EXIF extension processes EXIF information from images using the exif_read_data() function. In PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21, and 7.3.x below 7.3.8, it is possible for an attacker to supply specially crafted data that causes the parser to read beyond the allocated buffer. This can result in information disclosure, application crashes, or potentially allow for remote code execution. The vulnerability has a CVSS score of 7.1, indicating a high severity level.
How To Fix
Minimum fixed version
5.5.9+dfsg-1ubuntu4.29+esm5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade php5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider disabling the EXIF extension in your PHP configuration as a temporary workaround. You can do this by commenting out the line 'extension=exif.so' in your php.ini file and restarting your web server.
Conclusion
The CVE-2019-11041 vulnerability in the PHP EXIF extension poses significant risks to applications that utilize this functionality. It is crucial for developers and system administrators to update their PHP installations to the latest patched versions to mitigate these risks. Regular monitoring and vulnerability assessments are essential to maintain the security of your applications.
See every vulnerability recorded for php5 →
FAQ
CVE-2019-11041 is a vulnerability in the PHP EXIF extension that allows for buffer overflow, potentially leading to information disclosure or application crashes.
The affected versions include PHP 7.1.x below 7.1.31, 7.2.x below 7.2.21, and 7.3.x below 7.3.8.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to information disclosure, application crashes, or even remote code execution if exploited by an attacker.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for php5.
