CVE-2019-11038

Published: Jun 19, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.

Affected (25)

Products: Libgd: Libgd · Php: Php · Canonical: Ubuntu Linux · +5 more

Show all products

1 product

1 product

1 product

1 product

1 product

1 product

5 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Redhat

2 products

Enterprise Linux

Software Collections

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Libgd Libgd	Version 2.2.5
Php Php	From 7.1.0 to 7.1.30
Php Php	From 7.2.0 to 7.2.19
Php Php	From 7.3.0 to 7.3.6

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 29
Fedoraproject Fedora	Version 30
Fedoraproject Fedora	Version 32

Configuration E

9 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp5
Suse Linux Enterprise Software Development Kit	Version 12 sp4
Suse Linux Enterprise Software Development Kit	Version 12 sp5
Suse Linux Enterprise Workstation Extension	Version 12 sp4
Suse Linux Enterprise Workstation Extension	Version 12 sp5

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Software Collections	Version 1.0

Related CWEs

CWE-457

Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

CWE-908

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html

Source: security@php.net

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:2519

Source: security@php.net

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3299

Source: security@php.net

Third Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821

Source: security@php.net

Mailing ListThird Party Advisory

https://bugs.php.net/bug.php?id=77973

Source: security@php.net

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1724149

Source: security@php.net

ExploitIssue TrackingThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1724432

Source: security@php.net

ExploitIssue TrackingThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1140118

Source: security@php.net

ExploitIssue TrackingThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1140120

Source: security@php.net

ExploitIssue TrackingThird Party Advisory

https://github.com/libgd/libgd/issues/501

Source: security@php.net

ExploitThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html

Source: security@php.net

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/

Source: security@php.net

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG/

Source: security@php.net

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL/

Source: security@php.net

https://seclists.org/bugtraq/2019/Sep/38

Source: security@php.net

Mailing ListThird Party Advisory

https://usn.ubuntu.com/4316-1/

Source: security@php.net

Third Party Advisory

https://usn.ubuntu.com/4316-2/

Source: security@php.net

Third Party Advisory

https://www.debian.org/security/2019/dsa-4529

Source: security@php.net

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html