An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-php5alpine-linux-upgrade-php7 | Oct 1, 2024 | Aug 3, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade--php70amazon-linux-upgrade--php71amazon-linux-upgrade-php56amazon-linux-upgrade-php72 | Aug 24, 2018 | Aug 3, 2018 |
| Debian | debian-upgrade-php7-0 | Dec 11, 2018 | Aug 3, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-web-php-56-5-6-39-0-175-3-36-0-19-0oracle-solaris-11-3-upgrade-web-php-71-7-1-25-0-175-3-36-0-19-0oracle-solaris-11-4-upgrade-web-php-56-5-6-37-11-4-2-0-1-1-0oracle-solaris-11-4-upgrade-web-php-71-7-1-21-11-4-2-0-1-1-0 | Oct 19, 2018 | Aug 3, 2018 | |
| Php | php-upgrade-5_6_37php-upgrade-7_0_31php-upgrade-7_1_20php-upgrade-7_2_8 | Oct 5, 2018 | Aug 3, 2018 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Aug 3, 2018 |
| Suse | — | suse-upgrade-apache2-mod_php53suse-upgrade-php53suse-upgrade-php53-bcmathsuse-upgrade-php53-bz2suse-upgrade-php53-calendarsuse-upgrade-php53-ctypesuse-upgrade-php53-curlsuse-upgrade-php53-dbasuse-upgrade-php53-develsuse-upgrade-php53-domsuse-upgrade-php53-exifsuse-upgrade-php53-fastcgisuse-upgrade-php53-fileinfosuse-upgrade-php53-ftpsuse-upgrade-php53-gdsuse-upgrade-php53-gettextsuse-upgrade-php53-gmpsuse-upgrade-php53-iconvsuse-upgrade-php53-imapsuse-upgrade-php53-intlsuse-upgrade-php53-jsonsuse-upgrade-php53-ldapsuse-upgrade-php53-mbstringsuse-upgrade-php53-mcryptsuse-upgrade-php53-mysqlsuse-upgrade-php53-odbcsuse-upgrade-php53-opensslsuse-upgrade-php53-pcntlsuse-upgrade-php53-pdosuse-upgrade-php53-pearsuse-upgrade-php53-pgsqlsuse-upgrade-php53-posixsuse-upgrade-php53-pspellsuse-upgrade-php53-readlinesuse-upgrade-php53-shmopsuse-upgrade-php53-snmpsuse-upgrade-php53-soapsuse-upgrade-php53-socketssuse-upgrade-php53-sqlitesuse-upgrade-php53-suhosinsuse-upgrade-php53-sysvmsgsuse-upgrade-php53-sysvsemsuse-upgrade-php53-sysvshmsuse-upgrade-php53-tidysuse-upgrade-php53-tokenizersuse-upgrade-php53-wddxsuse-upgrade-php53-xmlreadersuse-upgrade-php53-xmlrpcsuse-upgrade-php53-xmlwritersuse-upgrade-php53-xslsuse-upgrade-php53-zipsuse-upgrade-php53-zlib | Sep 12, 2018 | Aug 3, 2018 |
| Ubuntu | ubuntu-upgrade-libapache2-mod-php5ubuntu-upgrade-libapache2-mod-php7-0ubuntu-upgrade-libapache2-mod-php7-2ubuntu-upgrade-php5-cgiubuntu-upgrade-php5-cliubuntu-upgrade-php5-fpmubuntu-upgrade-php7-0-cgiubuntu-upgrade-php7-0-cliubuntu-upgrade-php7-0-fpmubuntu-upgrade-php7-2-cgiubuntu-upgrade-php7-2-cliubuntu-upgrade-php7-2-fpm | Sep 27, 2018 | Aug 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub