CVE-2019-11049: mail() may release string with refcount==1 twice
Fixed bug (mail() may release string with refcount==1 twice). (CVE-2019-11049)
Other sources
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/php7.3to a version that resolves this vulnerability.Fixed in 7.3.31-1~deb10u1Fixed in 7.3.31-1~deb10u5 - Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 7.3.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.3.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.4.0
Event History
Frequently Asked Questions
What is the vulnerability ID for Fixed bug (mail() may release string with refcount==1 twice)?
The vulnerability ID for Fixed bug (mail() may release string with refcount==1 twice) is CVE-2019-11049.
What is the severity of CVE-2019-11049?
The severity of CVE-2019-11049 is critical with a severity value of 9.8.
What is the affected software for CVE-2019-11049?
The affected software for CVE-2019-11049 is PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows.
How can I fix CVE-2019-11049?
To fix CVE-2019-11049, you need to upgrade PHP to version 7.3.13 or higher.
Where can I find more information about CVE-2019-11049?
More information about CVE-2019-11049 can be found at the following references: [Link 1](https://www.php.net/ChangeLog-7.php#7.3.13), [Link 2](https://bugs.php.net/bug.php?id=78943), [Link 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/).