When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-odbcUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-intlUpgrade php-recodeUpgrade php-mbstringUpgrade apcu-panelUpgrade php-dbgUpgrade php-mysqlndUpgrade libzip-develUpgrade php-snmpUpgrade php-opcacheUpgrade php-soapUpgrade phpUpgrade php-enchantUpgrade php-pdoUpgrade php-gdUpgrade php-develUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-processUpgrade php-embeddedUpgrade php-fpmUpgrade php-pearUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-dbaUpgrade php-pgsqlUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-gmp | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-cli-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-commonUpgrade apcu-panelUpgrade php-bcmathUpgrade php-odbcUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbgUpgrade php-pecl-xdebug-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-gdUpgrade php-jsonUpgrade php-process-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade phpUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-enchantUpgrade php-pearUpgrade php-embedded-debuginfoUpgrade php-develUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-processUpgrade php-gd-debuginfoUpgrade php-debuginfoUpgrade php-recodeUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-xml | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-xmlrpcUpgrade phpUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-odbcUpgrade php-processUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-gdUpgrade php-commonUpgrade php-pdoUpgrade php-soap | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-gdUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-xmlrpcUpgrade php-soapUpgrade php-processUpgrade phpUpgrade php-pdoUpgrade php-ldapUpgrade php-commonUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-odbc | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-odbcUpgrade php-processUpgrade php-pgsqlUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-cliUpgrade php-xmlUpgrade php-mysqlUpgrade php-recodeUpgrade php-ldap | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade phpUpgrade php-processUpgrade php-commonUpgrade php-recodeUpgrade php-cliUpgrade php-soapUpgrade php-gdUpgrade php-xmlUpgrade php-fpmUpgrade php-pdoUpgrade php-odbcUpgrade php-ldapUpgrade php-xmlrpc | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-pgsqlUpgrade php-enchantUpgrade php-dbgUpgrade php-intlUpgrade php-jsonUpgrade php-pdoUpgrade php-odbcUpgrade php-develUpgrade php-bcmathUpgrade php-opcacheUpgrade php-recodeUpgrade apcu-panelUpgrade php-snmpUpgrade phpUpgrade php-embeddedUpgrade php-fpmUpgrade php-commonUpgrade php-ldapUpgrade libzipUpgrade php-cliUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-gdUpgrade php-pearUpgrade php-processUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-mbstring | Sep 10, 2020 | Dec 22, 2019 |
| Php | — | Upgrade to PHP version 7.4.1Upgrade to PHP version 7.2.26Upgrade to PHP version 7.3.13 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-gdUpgrade php-dbaUpgrade php-snmpUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recodeUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-pgsqlNo solution existsUpgrade php-dbgUpgrade php-develUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade phpUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-ldapUpgrade php-mysqlndUpgrade php-dba-debuginfoUpgrade php-embeddedUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debuginfoUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cliUpgrade php-pdoUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-embedded-debuginfoUpgrade php-xml-debuginfoUpgrade apcu-panelUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-commonUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade libzipUpgrade php-gmp-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-commonUpgrade php-common-debuginfoUpgrade php-intl-debuginfoUpgrade php-develUpgrade php-mbstringUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade libzipUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-gd-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-rrd-debuginfoUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-fpmUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-gmp-debuginfoUpgrade php-odbcUpgrade php-intlUpgrade php-dba-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-debugsourceUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-gdUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-snmpUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfo | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php7-develUpgrade php72Upgrade php53-ldapUpgrade php5-opcacheUpgrade php7-snmpUpgrade php53-gettextUpgrade php53-odbcUpgrade php7-posixUpgrade php7-opcacheUpgrade php72-pspellUpgrade php53-sysvmsgUpgrade apache2-mod_php7Upgrade php53Upgrade php7-socketsUpgrade php7-ftpUpgrade php53-suhosinUpgrade php7-tokenizerUpgrade php72-fastcgiUpgrade php5-gettextUpgrade php7-xmlreaderUpgrade php7-pgsqlUpgrade php7Upgrade php72-odbcUpgrade php53-shmopUpgrade php7-soapUpgrade php7-xmlwriterUpgrade php7-sysvsemUpgrade php7-embedUpgrade php53-xmlreaderUpgrade php5-imapUpgrade php7-gdUpgrade php53-mysqlUpgrade php72-sodiumUpgrade php7-exifUpgrade php53-pspellUpgrade php7-bcmathUpgrade php72-tidyUpgrade php5-pcntlUpgrade php72-xmlwriterUpgrade php53-gmpUpgrade php7-zipUpgrade php72-readlineUpgrade php53-opensslUpgrade php72-snmpUpgrade php7-wddxUpgrade php72-opcacheUpgrade php53-bz2Upgrade php5-xmlreaderUpgrade php5-xmlwriterUpgrade php53-bcmathUpgrade php53-pgsqlUpgrade php7-sqliteUpgrade php7-pharUpgrade php53-dbaUpgrade php72-pgsqlUpgrade php53-curlUpgrade php7-sysvmsgUpgrade php7-mysqlUpgrade php5-jsonUpgrade apache2-mod_php5Upgrade php53-ftpUpgrade php72-exifUpgrade php7-odbcUpgrade php5-wddxUpgrade php5-zipUpgrade php7-iconvUpgrade php5-pdoUpgrade php7-domUpgrade php72-sysvsemUpgrade php72-imapUpgrade php72-posixUpgrade php53-iconvUpgrade php5-ftpUpgrade php72-enchantUpgrade php5-mcryptUpgrade php72-xmlrpcUpgrade php53-gdUpgrade php7-gmpUpgrade php72-zlibUpgrade php5-xmlrpcUpgrade php72-ctypeUpgrade php53-pearUpgrade php53-wddxUpgrade php72-shmopUpgrade php7-bz2Upgrade php53-pdoUpgrade php5-gmpUpgrade php7-gettextUpgrade php72-soapUpgrade php53-zipUpgrade php7-pearUpgrade php72-xmlreaderUpgrade php7-fpmUpgrade php7-intlUpgrade php5-develUpgrade php7-shmopUpgrade php53-fastcgiUpgrade php53-mbstringUpgrade php72-socketsUpgrade php5-calendarUpgrade php7-testUpgrade php5-pharUpgrade php5-mbstringUpgrade php7-curlUpgrade php7-enchantUpgrade php7-pdoUpgrade php72-gettextUpgrade php72-bcmathUpgrade php72-sysvmsgUpgrade php7-tidyUpgrade php53-exifUpgrade php5-sysvsemUpgrade php72-ftpUpgrade php72-gdUpgrade php5Upgrade php5-tokenizerUpgrade php72-opensslUpgrade php5-sysvmsgUpgrade php7-xmlrpcUpgrade php7-readlineUpgrade php7-ldapUpgrade php5-fileinfoUpgrade php7-ctypeUpgrade php72-develUpgrade php5-dbaUpgrade php72-mysqlUpgrade php5-curlUpgrade apache2-mod_php53Upgrade php5-suhosinUpgrade php5-ctypeUpgrade php72-pdoUpgrade php5-snmpUpgrade php53-xmlrpcUpgrade php7-sodiumUpgrade php5-sqliteUpgrade php5-sysvshmUpgrade php7-firebirdUpgrade php72-mbstringUpgrade php53-xmlwriterUpgrade php7-zlibUpgrade php53-sysvsemUpgrade php7-fastcgiUpgrade php72-curlUpgrade php7-mbstringUpgrade php72-sysvshmUpgrade php72-pcntlUpgrade php72-calendarUpgrade php7-pear-archive_tarUpgrade php5-gdUpgrade php7-pspellUpgrade php5-iconvUpgrade php72-dbaUpgrade php5-pspellUpgrade php53-jsonUpgrade php5-xslUpgrade php53-zlibUpgrade php5-bz2Upgrade php5-soapUpgrade php72-domUpgrade php5-opensslUpgrade php53-snmpUpgrade php72-fpmUpgrade php5-odbcUpgrade php5-shmopUpgrade php72-ldapUpgrade php7-dbaUpgrade php7-jsonUpgrade php5-pearUpgrade php72-jsonUpgrade php72-gmpUpgrade php53-domUpgrade php72-pharUpgrade php5-fpmUpgrade php72-pearUpgrade php5-ldapUpgrade php72-xslUpgrade php5-enchantUpgrade php5-domUpgrade php5-posixUpgrade php53-sysvshmUpgrade php72-wddxUpgrade php7-opensslUpgrade php72-iconvUpgrade php7-fileinfoUpgrade php53-pcntlUpgrade php7-pcntlUpgrade php7-sysvshmUpgrade php5-pgsqlUpgrade php53-fileinfoUpgrade php5-exifUpgrade php5-bcmathUpgrade php72-fileinfoUpgrade php7-mcryptUpgrade php5-intlUpgrade php53-intlUpgrade php53-soapUpgrade php7-calendarUpgrade php5-socketsUpgrade php72-intlUpgrade php53-mcryptUpgrade php72-sqliteUpgrade php72-pear-archive_tarUpgrade php72-zipUpgrade php5-fastcgiUpgrade php72-tokenizerUpgrade php72-bz2Upgrade php7-xslUpgrade php7-imapUpgrade php53-tokenizerUpgrade php5-zlibUpgrade apache2-mod_php72Upgrade php5-mysqlUpgrade php53-calendarUpgrade php53-xslUpgrade php53-ctype | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php7.3-mbstringUpgrade php7.2-cgiUpgrade php7.3-bcmathUpgrade php7.3-cliUpgrade php5-cli (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.3Upgrade php7.0-xmlrpcUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-xmlrpcUpgrade php7.3-xmlrpcUpgrade php7.2-bcmathUpgrade php7.0-bcmathUpgrade php7.3-fpmUpgrade php7.0-cgiUpgrade libapache2-mod-php7.2Upgrade php7.0-mbstringUpgrade php7.2-mbstringUpgrade php5-cgiUpgrade php7.2-cliUpgrade libapache2-mod-php5Upgrade php5-xmlrpc (Ubuntu Pro)Upgrade php5-cliUpgrade php7.3-cgiUpgrade php5-xmlrpcUpgrade php7.2-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.0-cliUpgrade php5-fpm | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub