When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade php-pearUpgrade libzip-develUpgrade php-xmlUpgrade php-pgsqlUpgrade php-odbcUpgrade php-commonUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-ldapUpgrade apcu-panelUpgrade php-snmpUpgrade php-dbgUpgrade php-intlUpgrade php-develUpgrade php-dbaUpgrade libzipUpgrade php-soapUpgrade php-recodeUpgrade php-gdUpgrade php-mbstringUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-enchantUpgrade php-bcmathUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-processUpgrade php-mysqlndUpgrade php-gmpUpgrade phpUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-embedded | May 4, 2022 | May 3, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | May 3, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jun 14, 2019 | May 3, 2019 |
| Centos_linux | — | Upgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-opcacheUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-ldapUpgrade php-commonUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-enchantUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade libzipUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade apcu-panelUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-snmpUpgrade php-mbstringUpgrade php-processUpgrade php-recodeUpgrade php-gmpUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pearUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-gdUpgrade php-develUpgrade php-fpmUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-cliUpgrade php-snmp-debuginfo | Apr 29, 2020 | May 3, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | May 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pdoUpgrade php-odbcUpgrade php-ldapUpgrade php-soapUpgrade php-commonUpgrade php-pgsqlUpgrade php-gdUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade php-mysqlUpgrade php-cliUpgrade php | Nov 3, 2020 | May 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-soapUpgrade php-processUpgrade php-pgsqlUpgrade php-gdUpgrade php-odbcUpgrade php-cliUpgrade php-pdoUpgrade php-commonUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade php-mysqlUpgrade php-xmlrpc | Sep 28, 2020 | May 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-fpmUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-recodeUpgrade php-commonUpgrade php-odbcUpgrade php-gdUpgrade php-soapUpgrade php-processUpgrade phpUpgrade php-ldap | Jun 27, 2019 | May 3, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | May 3, 2019 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-pgsqlUpgrade php-intlUpgrade php-develUpgrade php-ldapUpgrade php-commonUpgrade apcu-panelUpgrade php-dbgUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-jsonUpgrade php-dbaUpgrade libzip-develUpgrade phpUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-soapUpgrade php-mysqlndUpgrade php-gdUpgrade php-cliUpgrade php-xmlUpgrade php-embeddedUpgrade php-snmpUpgrade php-pearUpgrade php-bcmathUpgrade php-pdoUpgrade php-processUpgrade php-opcacheUpgrade libzipUpgrade php-enchantUpgrade php-gmp | Jul 22, 2024 | May 2, 2019 |
| Php | — | Upgrade to PHP version 7.2.18Upgrade to PHP version 7.1.29Upgrade to PHP version 7.3.5 | May 10, 2019 | May 3, 2019 |
| Redhat_linux | — | Upgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade libzipUpgrade php-develUpgrade php-processUpgrade php-fpmUpgrade php-ldapUpgrade php-xmlrpc-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debugsourceUpgrade php-jsonUpgrade php-pdoUpgrade php-pecl-zip-debugsourceUpgrade php-gmpUpgrade php-pearUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-embeddedUpgrade libzip-debuginfoUpgrade php-opcacheUpgrade php-dbgUpgrade phpUpgrade php-common-debuginfoUpgrade php-recodeUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-commonUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade php-xmlUpgrade php-snmp-debuginfoNo solution existsUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-toolsUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade apcu-panelUpgrade php-opcache-debuginfo | Apr 29, 2020 | May 3, 2019 |
| Rocky_linux | — | Upgrade php-fpmUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-snmpUpgrade php-xmlUpgrade php-jsonUpgrade php-pecl-zip-debuginfoUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-debugsourceUpgrade php-commonUpgrade php-bcmathUpgrade php-odbcUpgrade php-gmpUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-embeddedUpgrade php-xmlrpcUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-cliUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-processUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-debuginfoUpgrade php-soapUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-enchantUpgrade phpUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-process-debuginfo | Mar 12, 2024 | May 3, 2019 |
| Suse | — | Upgrade php72-dbaUpgrade php5-gdUpgrade php5-posixUpgrade php5-dbaUpgrade php72-intlUpgrade php72-bz2Upgrade php72-tidyUpgrade php72-tokenizerUpgrade php7-ctypeUpgrade php7-xmlwriterUpgrade php7-pharUpgrade php72-ftpUpgrade php7-fastcgiUpgrade php5-sqliteUpgrade php7-zipUpgrade php72-gdUpgrade php72-zipUpgrade apache2-mod_php72Upgrade php7-jsonUpgrade php5-iconvUpgrade php7-curlUpgrade php7-tokenizerUpgrade php5-fpmUpgrade php7-sysvsemUpgrade php7-mcryptUpgrade php7-develUpgrade php7-enchantUpgrade php7-bcmathUpgrade php5-domUpgrade php5-pspellUpgrade php7-shmopUpgrade php72-imapUpgrade php7-pspellUpgrade php5-zlibUpgrade php72-fastcgiUpgrade php5-xslUpgrade php72-gettextUpgrade php5-ldapUpgrade php72-pearUpgrade php5-ctypeUpgrade php72-domUpgrade php5-xmlrpcUpgrade php7-fileinfoUpgrade php7-sysvshmUpgrade php7-testresultsUpgrade php7-wddxUpgrade php7-calendarUpgrade php72-develUpgrade php5-tokenizerUpgrade php72-enchantUpgrade php72-soapUpgrade php72-odbcUpgrade php72-pcntlUpgrade php5-suhosinUpgrade php72-gmpUpgrade php5-intlUpgrade php72-iconvUpgrade php5-pgsqlUpgrade php72-pdoUpgrade php7-odbcUpgrade php72-pear-archive_tarUpgrade php5-fileinfoUpgrade php7-opensslUpgrade php72-ldapUpgrade php72-socketsUpgrade php5-socketsUpgrade php72-sqliteUpgrade php72-jsonUpgrade php72-pspellUpgrade php72-calendarUpgrade php5-sysvshmUpgrade php72-xslUpgrade php72-pharUpgrade php5-pearUpgrade php72-opensslUpgrade php5-enchantUpgrade php7-mysqlUpgrade php72-wddxUpgrade php5-curlUpgrade php7-zlibUpgrade php7-snmpUpgrade php7-pearUpgrade php7-socketsUpgrade php5-bz2Upgrade php5-wddxUpgrade php7-embedUpgrade php7-sqliteUpgrade php7Upgrade php7-domUpgrade php5-gmpUpgrade php7-sysvmsgUpgrade apache2-mod_php5Upgrade php7-gettextUpgrade php5-sysvmsgUpgrade php72-opcacheUpgrade php72-mysqlUpgrade php7-imapUpgrade php5-bcmathUpgrade php5-develUpgrade php5-opensslUpgrade php5-fastcgiUpgrade php5-opcacheUpgrade php72-sysvshmUpgrade php72-pgsqlUpgrade php7-dbaUpgrade php5-imapUpgrade php5-xmlreaderUpgrade php72-posixUpgrade php7-gmpUpgrade php72-zlibUpgrade php7-gdUpgrade php5-odbcUpgrade php5-pcntlUpgrade php72-fpmUpgrade php7-xmlreaderUpgrade php7-posixUpgrade php7-xmlrpcUpgrade php5-exifUpgrade php7-pgsqlUpgrade php72-exifUpgrade php72-mbstringUpgrade php7-fpmUpgrade php72-sysvsemUpgrade php72-sysvmsgUpgrade php5-zipUpgrade php72-curlUpgrade php72-snmpUpgrade php5-xmlwriterUpgrade php5-jsonUpgrade php7-ldapUpgrade php7-firebirdUpgrade php7-sodiumUpgrade php5-snmpUpgrade php5-sysvsemUpgrade php5-mbstringUpgrade php7-bz2Upgrade php5-pharUpgrade php5-mcryptUpgrade php7-tidyUpgrade php7-pcntlUpgrade php5-shmopUpgrade php7-exifUpgrade php7-ftpUpgrade php72-bcmathUpgrade php72Upgrade php7-soapUpgrade php72-readlineUpgrade php7-iconvUpgrade php72-xmlreaderUpgrade php72-ctypeUpgrade php5-pdoUpgrade php5-ftpUpgrade php72-xmlwriterUpgrade php5-gettextUpgrade php72-xmlrpcUpgrade php5-soapUpgrade php7-xslUpgrade php5-calendarUpgrade php72-fileinfoUpgrade php7-intlUpgrade php7-pdoUpgrade php7-mbstringUpgrade php7-opcacheUpgrade php7-readlineUpgrade php72-shmopUpgrade apache2-mod_php7Upgrade php5Upgrade php7-pear-archive_tarUpgrade php5-mysql | May 24, 2019 | May 3, 2019 |
| Ubuntu | — | Upgrade php7.2-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php5-cgiUpgrade php5-cliUpgrade php7.2-cliUpgrade php7.0-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.2-cgiUpgrade php5-fpmUpgrade libapache2-mod-php7.2Upgrade php7.0-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0 | May 23, 2019 | May 3, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub