When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-develUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-enchantUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-recodeUpgrade php-soapUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-bcmathUpgrade php-embeddedUpgrade php-opcacheUpgrade php-fpmUpgrade php-jsonUpgrade php-gdUpgrade libzipUpgrade phpUpgrade php-pearUpgrade php-ldapUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-commonUpgrade libzip-toolsUpgrade php-cliUpgrade php-dbaUpgrade php-snmpUpgrade php-xmlUpgrade php-odbcUpgrade php-processUpgrade php-xmlrpcUpgrade libzip-devel | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php71Upgrade php73Upgrade php72 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-develUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade php-xmlUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-ldapUpgrade apcu-panelUpgrade php-snmpUpgrade php-commonUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade phpUpgrade php-bcmathUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade php-gdUpgrade php-dbaUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-process-debuginfoUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade libzipUpgrade php-mysqlndUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-embedded-debuginfoUpgrade libzip-toolsUpgrade php-recode-debuginfoUpgrade php-pearUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-mbstringUpgrade libzip-tools-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-intl-debuginfoUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-xmlrpc | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php72-exifUpgrade php73-exifUpgrade php71-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-recodeUpgrade php-pdoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-processUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-soapUpgrade php-gd | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-processUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-soapUpgrade php-mysqlUpgrade php-cliUpgrade php-ldapUpgrade phpUpgrade php-recodeUpgrade php-odbcUpgrade php-pdoUpgrade php-gd | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-mysqlUpgrade php-cliUpgrade php-recodeUpgrade php-odbcUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-gdUpgrade php-pgsqlUpgrade php-soapUpgrade php-processUpgrade php-ldapUpgrade php-pdoUpgrade php | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-mbstringUpgrade php-commonUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-snmpUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-opcacheUpgrade php-processUpgrade php-cliUpgrade libzip-develUpgrade php-recodeUpgrade libzip-toolsUpgrade php-intlUpgrade phpUpgrade php-enchantUpgrade php-gdUpgrade php-soapUpgrade php-jsonUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-pdoUpgrade libzipUpgrade php-pearUpgrade php-bcmathUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-develUpgrade php-pecl-apcuUpgrade php-gmp | Jul 22, 2024 | Mar 16, 2019 |
| Php | — | Upgrade to PHP version 7.3.4Upgrade to PHP version 7.1.28Upgrade to PHP version 7.2.17 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-recodeUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade php-fpmUpgrade php-enchant-debuginfoUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-commonUpgrade phpUpgrade php-dba-debuginfoUpgrade php-bcmathUpgrade php-odbcUpgrade php-xml-debuginfoUpgrade php-pearUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-cliUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-gmpUpgrade php-common-debuginfoNo solution existsUpgrade php-ldapUpgrade php-snmpUpgrade php-xmlUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-gdUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade apcu-panelUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-processUpgrade php-pgsqlUpgrade php-soap-debuginfoUpgrade php-soap | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-process-debuginfoUpgrade php-develUpgrade php-mbstringUpgrade php-pdoUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade php-processUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-gdUpgrade php-dbaUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-enchantUpgrade php-pecl-zipUpgrade libzipUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-snmpUpgrade php-embeddedUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-cliUpgrade php-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-intl | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php72-jsonUpgrade php72-intlUpgrade php7-xmlwriterUpgrade php5-ldapUpgrade php5-fpmUpgrade php7-sysvsemUpgrade php72-ldapUpgrade php72-develUpgrade php5-sysvmsgUpgrade php7-fastcgiUpgrade php5-enchantUpgrade php5-pcntlUpgrade php7-calendarUpgrade php5-socketsUpgrade php7-pharUpgrade php7-pspellUpgrade php72-odbcUpgrade php72-pear-archive_tarUpgrade php72-pearUpgrade php5-iconvUpgrade php5-ctypeUpgrade php5-dbaUpgrade php7-odbcUpgrade php5-fileinfoUpgrade php7-mysqlUpgrade php5-curlUpgrade php7-curlUpgrade php5-pgsqlUpgrade php72-soapUpgrade php72-gmpUpgrade php7-pcntlUpgrade php72-zipUpgrade php72-dbaUpgrade php5-suhosinUpgrade php7-shmopUpgrade php5-odbcUpgrade php72-pharUpgrade apache2-mod_php72Upgrade php5-posixUpgrade php7-wddxUpgrade php5-gdUpgrade php72-sysvmsgUpgrade php7-snmpUpgrade php7-tokenizerUpgrade php7-bcmathUpgrade php7-testresultsUpgrade php72-pcntlUpgrade php72-enchantUpgrade php5-pearUpgrade php72-pdoUpgrade php7-opensslUpgrade php72-opensslUpgrade php5-domUpgrade php7-mcryptUpgrade php7-fileinfoUpgrade php72-imapUpgrade php72-domUpgrade php72-wddxUpgrade php72-pspellUpgrade php72-xslUpgrade php5-sysvshmUpgrade php7-pearUpgrade php5-intlUpgrade php72-iconvUpgrade php7-zipUpgrade php72-socketsUpgrade php72-bz2Upgrade php72-calendarUpgrade php7-zlibUpgrade php5-develUpgrade php72-gdUpgrade php5-tokenizerUpgrade php5-pspellUpgrade php7-develUpgrade php7-sysvshmUpgrade php7-intlUpgrade php72-fastcgiUpgrade php7-ctypeUpgrade php5-sqliteUpgrade php72-tokenizerUpgrade php5-zlibUpgrade php7-enchantUpgrade php72-opcacheUpgrade php7-opcacheUpgrade php72-ftpUpgrade php5-mbstringUpgrade php5-fastcgiUpgrade php5-pharUpgrade php72-tidyUpgrade php72-snmpUpgrade php7-readlineUpgrade php7-firebirdUpgrade php7-soapUpgrade php72-exifUpgrade php72-xmlreaderUpgrade php5-xslUpgrade php7-jsonUpgrade php7Upgrade php7-sodiumUpgrade php5-opensslUpgrade php7-exifUpgrade php7-imapUpgrade php7-domUpgrade php5-xmlreaderUpgrade php72-xmlrpcUpgrade php7-sysvmsgUpgrade php72-fpmUpgrade php72-shmopUpgrade php7-mbstringUpgrade php5-snmpUpgrade php72-zlibUpgrade php5-imapUpgrade php72-pgsqlUpgrade php7-pgsqlUpgrade php5-wddxUpgrade php7-iconvUpgrade php72-curlUpgrade php5-opcacheUpgrade php7-posixUpgrade php72-bcmathUpgrade php5-bcmathUpgrade php5-shmopUpgrade php7-bz2Upgrade php7-tidyUpgrade php72-mbstringUpgrade php5-gmpUpgrade php72-mysqlUpgrade php5-calendarUpgrade php72-xmlwriterUpgrade php7-xmlreaderUpgrade php7-gmpUpgrade php5-pdoUpgrade apache2-mod_php7Upgrade php5-jsonUpgrade php5-zipUpgrade php5-mcryptUpgrade php72-ctypeUpgrade php72-posixUpgrade php5-exifUpgrade php5-soapUpgrade php7-pear-archive_tarUpgrade php7-dbaUpgrade php72-fileinfoUpgrade php72-gettextUpgrade php5-mysqlUpgrade php7-xslUpgrade php5Upgrade php5-bz2Upgrade php7-gettextUpgrade php72Upgrade php72-sysvshmUpgrade php7-fpmUpgrade php7-ldapUpgrade php7-pdoUpgrade php5-sysvsemUpgrade php5-ftpUpgrade php5-gettextUpgrade php72-sysvsemUpgrade php7-socketsUpgrade php5-xmlwriterUpgrade php72-sqliteUpgrade php5-xmlrpcUpgrade php7-gdUpgrade php72-readlineUpgrade php7-sqliteUpgrade php7-embedUpgrade php7-ftpUpgrade apache2-mod_php5Upgrade php7-xmlrpc | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php7.2-fpmUpgrade php7.0-cgiUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php5-fpmUpgrade php7.2-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgiUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0 | May 1, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub