USN-4239-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-4239-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4239-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4239-1

Related

CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
UBUNTU-CVE-2019-11045
UBUNTU-CVE-2019-11046
UBUNTU-CVE-2019-11047
UBUNTU-CVE-2019-11050

Published

2020-01-15T13:21:23.663762Z

Modified

2020-01-15T13:21:23.663762Z

Summary

php5, php7.0, php7.2, php7.3 vulnerabilities

Details

It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, 16.04 LTS, 18.04 LTS, 19.04 and 19.10. (CVE-2019-11045)

It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-11046)

It was discovered that PHP incorrectly handled certain images. An attacker could possibly use this issue to access sensitive information. (CVE-2019-11047, CVE-2019-11050)

References

Affected packages

Ubuntu:14.04:LTS / php5

Package

Name: php5
Purl: pkg:deb/ubuntu/php5@5.5.9+dfsg-1ubuntu4.29+esm8?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.9+dfsg-1ubuntu4.29+esm8

Affected versions

5.*

5.5.3+dfsg-1ubuntu2

5.5.3+dfsg-1ubuntu3

5.5.6+dfsg-1ubuntu1

5.5.6+dfsg-1ubuntu2

5.5.8+dfsg-2ubuntu1

5.5.9+dfsg-1ubuntu1

5.5.9+dfsg-1ubuntu2

5.5.9+dfsg-1ubuntu3

5.5.9+dfsg-1ubuntu4

5.5.9+dfsg-1ubuntu4.1

5.5.9+dfsg-1ubuntu4.2

5.5.9+dfsg-1ubuntu4.3

5.5.9+dfsg-1ubuntu4.4

5.5.9+dfsg-1ubuntu4.5

5.5.9+dfsg-1ubuntu4.6

5.5.9+dfsg-1ubuntu4.7

5.5.9+dfsg-1ubuntu4.9

5.5.9+dfsg-1ubuntu4.11

5.5.9+dfsg-1ubuntu4.12

5.5.9+dfsg-1ubuntu4.13

5.5.9+dfsg-1ubuntu4.14

5.5.9+dfsg-1ubuntu4.16

5.5.9+dfsg-1ubuntu4.17

5.5.9+dfsg-1ubuntu4.19

5.5.9+dfsg-1ubuntu4.20

5.5.9+dfsg-1ubuntu4.21

5.5.9+dfsg-1ubuntu4.22

5.5.9+dfsg-1ubuntu4.23

5.5.9+dfsg-1ubuntu4.24

5.5.9+dfsg-1ubuntu4.25

5.5.9+dfsg-1ubuntu4.26

5.5.9+dfsg-1ubuntu4.27

5.5.9+dfsg-1ubuntu4.29

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "php5-gd": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "libphp5-embed": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-mysqlnd": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php-pear": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-cli": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-fpm": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-pspell": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-mysql": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-curl": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-ldap": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-pgsql": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-xsl": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-readline": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-enchant": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-common": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-dev": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "libapache2-mod-php5filter": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-sybase": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-gmp": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-odbc": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-cgi": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-recode": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "libapache2-mod-php5": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-sqlite": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-snmp": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-intl": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-xmlrpc": "5.5.9+dfsg-1ubuntu4.29+esm8",
            "php5-tidy": "5.5.9+dfsg-1ubuntu4.29+esm8"
        }
    ]
}

Ubuntu:16.04:LTS / php7.0

Package

Name: php7.0
Purl: pkg:deb/ubuntu/php7.0@7.0.33-0ubuntu0.16.04.9?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.33-0ubuntu0.16.04.9

Affected versions

7.*

7.0.1-5

7.0.1-6

7.0.2-1

7.0.2-3

7.0.2-4

7.0.2-5

7.0.3-2

7.0.3-3

7.0.3-9ubuntu1

7.0.4-5ubuntu1

7.0.4-5ubuntu2

7.0.4-7ubuntu1

7.0.4-7ubuntu2

7.0.4-7ubuntu2.1

7.0.8-0ubuntu0.16.04.1

7.0.8-0ubuntu0.16.04.2

7.0.8-0ubuntu0.16.04.3

7.0.13-0ubuntu0.16.04.1

7.0.15-0ubuntu0.16.04.1

7.0.15-0ubuntu0.16.04.2

7.0.15-0ubuntu0.16.04.4

7.0.18-0ubuntu0.16.04.1

7.0.22-0ubuntu0.16.04.1

7.0.25-0ubuntu0.16.04.1

7.0.28-0ubuntu0.16.04.1

7.0.30-0ubuntu0.16.04.1

7.0.32-0ubuntu0.16.04.1

7.0.33-0ubuntu0.16.04.1

7.0.33-0ubuntu0.16.04.2

7.0.33-0ubuntu0.16.04.3

7.0.33-0ubuntu0.16.04.4

7.0.33-0ubuntu0.16.04.5

7.0.33-0ubuntu0.16.04.6

7.0.33-0ubuntu0.16.04.7

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "php7.0-mcrypt-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-enchant": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-xsl": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-intl": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-mysql": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-dba": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-pgsql-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-zip": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-soap": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-readline": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-mcrypt": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-gd": "7.0.33-0ubuntu0.16.04.9",
            "libphp7.0-embed": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-interbase": "7.0.33-0ubuntu0.16.04.9",
            "php7.0": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-imap": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-xmlrpc-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-ldap-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-opcache": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-bz2-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-opcache-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-json": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-fpm": "7.0.33-0ubuntu0.16.04.9",
            "libapache2-mod-php7.0-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-xml": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-tidy": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-dba-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-common-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-sqlite3": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-bcmath-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-bcmath": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-common": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-mysql-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-odbc-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-gmp-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-cgi": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-phpdbg-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-json-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-readline-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-pspell": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-mbstring-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-tidy-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-cli-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-curl-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-cgi-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-enchant-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-odbc": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-soap-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "libphp7.0-embed-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-interbase-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "libapache2-mod-php7.0": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-recode": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-fpm-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-pspell-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-imap-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-gmp": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-recode-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-sybase-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-ldap": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-snmp": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-intl-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-pgsql": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-sqlite3-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-curl": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-xmlrpc": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-dev": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-snmp-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-bz2": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-zip-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-cli": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-xml-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-mbstring": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-sybase": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-gd-dbgsym": "7.0.33-0ubuntu0.16.04.9",
            "php7.0-phpdbg": "7.0.33-0ubuntu0.16.04.9"
        }
    ]
}

Ubuntu:18.04:LTS / php7.2

Package

Name: php7.2
Purl: pkg:deb/ubuntu/php7.2@7.2.24-0ubuntu0.18.04.2?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.24-0ubuntu0.18.04.2

Affected versions

7.*

7.2.1-1ubuntu2

7.2.2-1ubuntu1

7.2.2-1ubuntu2

7.2.3-1ubuntu1

7.2.5-0ubuntu0.18.04.1

7.2.7-0ubuntu0.18.04.1

7.2.7-0ubuntu0.18.04.2

7.2.10-0ubuntu0.18.04.1

7.2.15-0ubuntu0.18.04.1

7.2.15-0ubuntu0.18.04.2

7.2.17-0ubuntu0.18.04.1

7.2.19-0ubuntu0.18.04.1

7.2.19-0ubuntu0.18.04.2

7.2.24-0ubuntu0.18.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "php7.2-opcache-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "libapache2-mod-php7.2": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-opcache": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-sybase": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-bz2": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-odbc": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-recode": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-phpdbg": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-phpdbg-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "libapache2-mod-php7.2-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-mysql-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-sqlite3-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-sqlite3": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-tidy": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-json": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-curl-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-dba-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-sybase-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-common-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-zip": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-interbase-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-common": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-xml-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-xml": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-fpm-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-mysql": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-tidy-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-imap": "7.2.24-0ubuntu0.18.04.2",
            "libphp7.2-embed": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-ldap-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-gd": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-cgi-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-soap": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-bz2-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-recode-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-ldap": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-gd-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-mbstring": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-mbstring-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-intl-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-intl": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-cli-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-pspell": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-gmp": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-dev": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-bcmath": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-snmp": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-pspell-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-soap-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-pgsql": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-interbase": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-snmp-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-cgi": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-odbc-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-gmp-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-xmlrpc": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-curl": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-imap-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-readline-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-fpm": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-cli": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-xsl": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-enchant-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-zip-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-dba": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-pgsql-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-json-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-bcmath-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-readline": "7.2.24-0ubuntu0.18.04.2",
            "libphp7.2-embed-dbgsym": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-enchant": "7.2.24-0ubuntu0.18.04.2",
            "php7.2-xmlrpc-dbgsym": "7.2.24-0ubuntu0.18.04.2"
        }
    ]
}