An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzipUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-enchantUpgrade php-opcacheUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-intlUpgrade php-ldapUpgrade phpUpgrade php-xmlUpgrade php-recodeUpgrade php-snmpUpgrade libzip-develUpgrade php-cliUpgrade php-dbgUpgrade php-processUpgrade php-commonUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-soapUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-develUpgrade php-pearUpgrade php-fpmUpgrade php-odbcUpgrade php-gdUpgrade php-mbstringUpgrade php-dbaUpgrade php-bcmathUpgrade php-gmp | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php71Upgrade php72 | Sep 19, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-dbgUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-opcacheUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlndUpgrade php-ldapUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade php-dbaUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-snmpUpgrade php-odbcUpgrade php-cliUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debugsourceUpgrade libzip-toolsUpgrade php-recodeUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-develUpgrade php-pdoUpgrade php-dbg-debuginfoUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-jsonUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-soapUpgrade php-mysqlnd-debuginfo | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pgsqlUpgrade php-pdoUpgrade php-processUpgrade php-gdUpgrade php-mysqlUpgrade php-soapUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade php-cliUpgrade php | May 7, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-recodeUpgrade php-pdoUpgrade php-mysqlUpgrade php-commonUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-processUpgrade phpUpgrade php-gdUpgrade php-soapUpgrade php-pgsqlUpgrade php-odbc | May 30, 2019 | Mar 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-mysqlUpgrade php-gdUpgrade php-soapUpgrade php-pgsqlUpgrade php-processUpgrade php-odbcUpgrade php-pdoUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-commonUpgrade phpUpgrade php-recodeUpgrade php-xmlUpgrade php-cli | May 7, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade php-bcmathUpgrade php-recodeUpgrade php-opcacheUpgrade php-mbstringUpgrade php-develUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade libzip-develUpgrade php-processUpgrade php-enchantUpgrade php-embeddedUpgrade php-snmpUpgrade php-fpmUpgrade php-mysqlndUpgrade php-pearUpgrade libzipUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-dbgUpgrade php-soapUpgrade php-intlUpgrade php-gdUpgrade libzip-toolsUpgrade php-jsonUpgrade php-commonUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-ldapUpgrade apcu-panelUpgrade php-dbaUpgrade php-odbcUpgrade phpUpgrade php-gmpUpgrade php-pecl-apcu-devel | Jul 22, 2024 | Jan 29, 2019 |
| Php | — | Upgrade to PHP version 7.3.3Upgrade to PHP version 7.2.16Upgrade to PHP version 7.1.27 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-snmpNo solution existsUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-embedded-debuginfoUpgrade phpUpgrade php-recode-debuginfoUpgrade php-enchantUpgrade php-opcacheUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-mysqlndUpgrade php-cliUpgrade libzip-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-mbstringUpgrade libzip-tools-debuginfoUpgrade php-fpmUpgrade php-pecl-apcu-debuginfoUpgrade php-gdUpgrade php-develUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pearUpgrade php-process | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-develUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-common-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-odbcUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-recodeUpgrade libzipUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade php-dba-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-cliUpgrade php-mysqlndUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-xml-debuginfoUpgrade php-xmlrpcUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade libzip-debugsourceUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade php-intlUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pdo-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php53-ctypeUpgrade php7-calendarUpgrade php7-xslUpgrade php72-mbstringUpgrade php72-pharUpgrade php72-pcntlUpgrade php5-bz2Upgrade php53-gmpUpgrade php53-tokenizerUpgrade php53-readlineUpgrade php72-sysvshmUpgrade php5-mysqlUpgrade php5-curlUpgrade php53-intlUpgrade php5-pharUpgrade php5-pgsqlUpgrade php53-opensslUpgrade php7-dbaUpgrade php53-sysvshmUpgrade php72-enchantUpgrade php53-bcmathUpgrade php5-enchantUpgrade php7-firebirdUpgrade php53-pdoUpgrade php7-opcacheUpgrade php72-dbaUpgrade php7-testresultsUpgrade php7-sysvshmUpgrade php5-fpmUpgrade php7-mcryptUpgrade php72-pearUpgrade php5-gdUpgrade php72-shmopUpgrade php72-exifUpgrade php5-suhosinUpgrade php7-xmlreaderUpgrade php72-sysvsemUpgrade php5-fileinfoUpgrade php5-pcntlUpgrade php7-sodiumUpgrade php53-xslUpgrade php7-pearUpgrade php5-ldapUpgrade php72-imapUpgrade apache2-mod_php72Upgrade php7-zipUpgrade php72-sysvmsgUpgrade php72-bz2Upgrade php72-calendarUpgrade php7-gmpUpgrade php72-posixUpgrade php53-zlibUpgrade php53-xmlrpcUpgrade php53-pearUpgrade php7-pspellUpgrade php53-snmpUpgrade php5-mcryptUpgrade php7-tidyUpgrade php5-opcacheUpgrade php53Upgrade php5-develUpgrade php72-opensslUpgrade php5-snmpUpgrade php53-iconvUpgrade php53-pcntlUpgrade php5-jsonUpgrade php53-ldapUpgrade php72-xslUpgrade php5Upgrade php53-bz2Upgrade php5-tokenizerUpgrade php7-xmlrpcUpgrade php53-dbaUpgrade php7-bz2Upgrade php7-mysqlUpgrade php72-intlUpgrade php5-pspellUpgrade php72-opcacheUpgrade php7-intlUpgrade php53-gdUpgrade php7-curlUpgrade php5-zlibUpgrade php7-gdUpgrade php7Upgrade php5-sqliteUpgrade php72-develUpgrade php5-shmopUpgrade php5-dbaUpgrade php5-gmpUpgrade php5-pdoUpgrade php72-gdUpgrade php7-imapUpgrade php7-fileinfoUpgrade php72-wddxUpgrade php53-fastcgiUpgrade php53-pspellUpgrade php5-odbcUpgrade php5-soapUpgrade php72-ctypeUpgrade php7-domUpgrade php5-calendarUpgrade php72-fileinfoUpgrade php53-exifUpgrade php53-develUpgrade php7-sysvsemUpgrade php72-xmlwriterUpgrade php72-domUpgrade php5-pearUpgrade php7-exifUpgrade php53-zipUpgrade php53-posixUpgrade php7-zlibUpgrade php72-iconvUpgrade apache2-mod_php53Upgrade php53-wddxUpgrade php7-enchantUpgrade php7-mbstringUpgrade php5-xslUpgrade php53-domUpgrade php53-mysqlUpgrade php5-ctypeUpgrade php53-shmopUpgrade php7-gettextUpgrade php7-wddxUpgrade php53-tidyUpgrade php7-ctypeUpgrade php7-tokenizerUpgrade php53-pgsqlUpgrade php5-xmlwriterUpgrade php7-snmpUpgrade php7-fpmUpgrade php5-opensslUpgrade php5-ftpUpgrade apache2-mod_php5Upgrade php53-gettextUpgrade php5-socketsUpgrade php53-mcryptUpgrade php53-calendarUpgrade php5-exifUpgrade php53-socketsUpgrade php72-tokenizerUpgrade php72-odbcUpgrade php72-curlUpgrade php53-xmlreaderUpgrade php7-shmopUpgrade php72-sqliteUpgrade php72-ftpUpgrade php72-xmlrpcUpgrade php72-zlibUpgrade php72-soapUpgrade php72Upgrade php72-xmlreaderUpgrade php5-intlUpgrade php5-xmlrpcUpgrade php72-mysqlUpgrade php7-pgsqlUpgrade php53-sqliteUpgrade php53-imapUpgrade php72-gmpUpgrade php72-pdoUpgrade php72-fpmUpgrade php7-soapUpgrade php7-pharUpgrade php53-sysvmsgUpgrade php53-soapUpgrade php5-fastcgiUpgrade php5-wddxUpgrade php5-posixUpgrade php5-imapUpgrade php53-jsonUpgrade php72-tidyUpgrade php72-pear-archive_tarUpgrade php72-readlineUpgrade php72-gettextUpgrade php7-pdoUpgrade php72-fastcgiUpgrade php53-fileinfoUpgrade php5-zipUpgrade php5-domUpgrade php5-bcmathUpgrade php53-xmlwriterUpgrade php7-ldapUpgrade php72-ldapUpgrade php72-zipUpgrade php7-iconvUpgrade php7-fastcgiUpgrade php7-bcmathUpgrade php53-suhosinUpgrade php53-mbstringUpgrade php7-odbcUpgrade php53-odbcUpgrade php5-sysvmsgUpgrade php72-jsonUpgrade php7-xmlwriterUpgrade php7-sqliteUpgrade php53-ftpUpgrade php5-mbstringUpgrade php7-sysvmsgUpgrade php72-snmpUpgrade php7-develUpgrade php5-iconvUpgrade php72-pgsqlUpgrade php5-xmlreaderUpgrade php72-socketsUpgrade php5-gettextUpgrade php7-posixUpgrade php5-sysvsemUpgrade php5-sysvshmUpgrade php7-jsonUpgrade php53-curlUpgrade php7-embedUpgrade php7-readlineUpgrade php7-opensslUpgrade php7-pear-archive_tarUpgrade php53-sysvsemUpgrade php72-bcmathUpgrade php72-pspellUpgrade apache2-mod_php7Upgrade php7-socketsUpgrade php7-pcntlUpgrade php7-ftp | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php7.2-cgiUpgrade php5-fpmUpgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php7.2-fpmUpgrade libapache2-mod-php7.2Upgrade php7.0-cliUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php5-cliUpgrade php5-xmlrpc | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub