CVE-2019-11045

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded 0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.

Weakness

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	7.2.0 (including)	7.2.26 (including)
Php	Php	7.3.0 (including)	7.3.13 (including)
Php	Php	7.4.0 (including)	7.4.0 (including)
Red Hat Enterprise Linux 8	RedHat	php:7.3-8020020200715124551.ceb1cf90	*
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	rh-php73-php-0:7.3.20-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS	RedHat	rh-php73-php-0:7.3.20-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS	RedHat	rh-php73-php-0:7.3.20-1.el7	*
Php5	Ubuntu	esm-infra-legacy/trusty	*
Php5	Ubuntu	trusty	*
Php5	Ubuntu	trusty/esm	*
Php7.0	Ubuntu	esm-infra/xenial	*
Php7.0	Ubuntu	xenial	*
Php7.2	Ubuntu	bionic	*
Php7.2	Ubuntu	disco	*
Php7.2	Ubuntu	esm-infra/bionic	*
Php7.2	Ubuntu	upstream	*
Php7.3	Ubuntu	devel	*
Php7.3	Ubuntu	eoan	*
Php7.3	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-11045
CWE	https://cwe.mitre.org/data/definitions/170.html

Improper Null Termination

Weakness

Affected Software

Potential Mitigations

References