Description

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.

Remediation

References

CVE-2019-9024

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2006-5354)

Jboss EAP Other Vulnerability (CVE-2020-1710)

MySQL CVE-2013-1511 Vulnerability (CVE-2013-1511)

Django Improper Input Validation Vulnerability (CVE-2014-3730)

Oracle JRE CVE-2012-0503 Vulnerability (CVE-2012-0503)

Severity

High

Classification

CVE-2019-9024 CWE-125 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities