When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pgsqlUpgrade php-dbaUpgrade php-mbstringUpgrade php-cliUpgrade php-xmlUpgrade libzip-toolsUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade libzip-develUpgrade php-mysqlndUpgrade php-processUpgrade php-snmpUpgrade php-develUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-soapUpgrade php-bcmathUpgrade php-ldapUpgrade php-dbgUpgrade php-intlUpgrade apcu-panelUpgrade php-gdUpgrade php-fpmUpgrade php-embeddedUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-pdoUpgrade php-opcacheUpgrade php-gmpUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade libzip | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-intlUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-xmlUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-pecl-zip-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-ldapUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade phpUpgrade php-fpmUpgrade libzip-develUpgrade php-snmpUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-cli-debuginfoUpgrade php-cliUpgrade libzipUpgrade libzip-toolsUpgrade php-processUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-pearUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-enchantUpgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-gmpUpgrade php-recode-debuginfoUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-embedded-debuginfoUpgrade php-soap | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php72-exifUpgrade php73-exifUpgrade php71-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade phpUpgrade php-processUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-commonUpgrade php-pdoUpgrade php-gdUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbc | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-gdUpgrade php-cliUpgrade php-pdoUpgrade php-recodeUpgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-soapUpgrade php-xmlUpgrade php-process | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-ldapUpgrade php-pgsqlUpgrade php-soapUpgrade phpUpgrade php-processUpgrade php-gdUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-xmlUpgrade php-odbcUpgrade php-cli | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade php-xmlrpcUpgrade php-commonUpgrade php-opcacheUpgrade php-mysqlndUpgrade libzip-develUpgrade php-intlUpgrade php-cliUpgrade php-recodeUpgrade php-dbaUpgrade php-odbcUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-xmlUpgrade php-processUpgrade apcu-panelUpgrade php-snmpUpgrade php-pearUpgrade php-jsonUpgrade php-embeddedUpgrade php-enchantUpgrade php-pgsqlUpgrade php-pdoUpgrade php-develUpgrade php-soapUpgrade php-gmpUpgrade php-dbgUpgrade phpUpgrade php-gdUpgrade php-fpmUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-zip | Jul 22, 2024 | Mar 16, 2019 |
| Php | — | Upgrade to PHP version 7.1.28Upgrade to PHP version 7.3.4Upgrade to PHP version 7.2.17 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-xmlUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-bcmathUpgrade phpUpgrade php-develUpgrade php-dba-debuginfoUpgrade php-enchantNo solution existsUpgrade php-recode-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-snmpUpgrade php-fpmUpgrade php-dbgUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-recodeUpgrade php-cliUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-embedded-debuginfoUpgrade php-soap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-gdUpgrade php-dbaUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-fpm-debuginfoUpgrade php-mysqlndUpgrade php-process-debuginfoUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-soapUpgrade php-bcmath-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-odbc-debuginfoUpgrade php-enchantUpgrade php-dbaUpgrade php-dba-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debugsourceUpgrade php-fpmUpgrade php-develUpgrade php-bcmathUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-pdoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade libzipUpgrade php-dbgUpgrade php-gdUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-jsonUpgrade php-odbcUpgrade php-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlndUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-ldap-debuginfoUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-recodeUpgrade php-intlUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-soap-debuginfoUpgrade php | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php72-exifUpgrade php5-xmlrpcUpgrade php5-bz2Upgrade php5-sysvsemUpgrade php7-xslUpgrade php72-mysqlUpgrade php5-xslUpgrade php7-gmpUpgrade php7-pdoUpgrade php5Upgrade php5-soapUpgrade php7-tidyUpgrade php7-posixUpgrade php72-xmlwriterUpgrade php7-domUpgrade php5-xmlreaderUpgrade php7-xmlreaderUpgrade php5-pdoUpgrade php72-xmlreaderUpgrade php7-exifUpgrade php7-sodiumUpgrade php7-jsonUpgrade php7-sysvmsgUpgrade php72-xmlrpcUpgrade php7-imapUpgrade php7Upgrade php72-gettextUpgrade php72-ftpUpgrade php5-bcmathUpgrade php5-shmopUpgrade php5-opensslUpgrade php7-ftpUpgrade php72-readlineUpgrade php7-bz2Upgrade php5-wddxUpgrade php72-tidyUpgrade php5-imapUpgrade php5-snmpUpgrade php72-zlibUpgrade php5-gmpUpgrade apache2-mod_php7Upgrade php72-pgsqlUpgrade php5-xmlwriterUpgrade php7-mbstringUpgrade php7-xmlrpcUpgrade php7-sqliteUpgrade php72-shmopUpgrade php5-jsonUpgrade php7-iconvUpgrade php72-mbstringUpgrade php7-pgsqlUpgrade php7-socketsUpgrade php7-gettextUpgrade php72-posixUpgrade php7-soapUpgrade php72-fileinfoUpgrade php7-gdUpgrade php5-pharUpgrade php72-sysvsemUpgrade php72-snmpUpgrade php72-sqliteUpgrade php72-opcacheUpgrade php7-embedUpgrade php5-calendarUpgrade php7-fpmUpgrade php7-ldapUpgrade php72Upgrade php5-exifUpgrade php72-bcmathUpgrade php72-fpmUpgrade php72-sysvshmUpgrade php5-gettextUpgrade php7-pear-archive_tarUpgrade php7-dbaUpgrade php7-readlineUpgrade php5-mbstringUpgrade php72-curlUpgrade php5-ftpUpgrade php5-zipUpgrade php5-mysqlUpgrade php5-opcacheUpgrade php5-mcryptUpgrade php7-firebirdUpgrade php72-ctypeUpgrade php7-opcacheUpgrade php5-fastcgiUpgrade apache2-mod_php5Upgrade php72-jsonUpgrade apache2-mod_php72Upgrade php7-pspellUpgrade php7-develUpgrade php72-xslUpgrade php72-bz2Upgrade php72-fastcgiUpgrade php5-fileinfoUpgrade php72-gmpUpgrade php5-fpmUpgrade php5-ldapUpgrade php5-pgsqlUpgrade php7-pearUpgrade php72-opensslUpgrade php72-pdoUpgrade php72-domUpgrade php72-imapUpgrade php5-sysvshmUpgrade php7-opensslUpgrade php5-domUpgrade php72-soapUpgrade php72-calendarUpgrade php7-zipUpgrade php7-bcmathUpgrade php7-zlibUpgrade php7-mysqlUpgrade php72-pear-archive_tarUpgrade php7-testresultsUpgrade php72-develUpgrade php7-shmopUpgrade php7-ctypeUpgrade php72-pearUpgrade php72-enchantUpgrade php5-socketsUpgrade php5-iconvUpgrade php7-pharUpgrade php5-dbaUpgrade php72-intlUpgrade php72-sysvmsgUpgrade php7-sysvsemUpgrade php5-pspellUpgrade php5-ctypeUpgrade php5-pcntlUpgrade php5-posixUpgrade php7-odbcUpgrade php5-sysvmsgUpgrade php5-enchantUpgrade php7-xmlwriterUpgrade php5-zlibUpgrade php7-enchantUpgrade php5-sqliteUpgrade php72-ldapUpgrade php72-tokenizerUpgrade php7-fastcgiUpgrade php5-develUpgrade php5-curlUpgrade php7-intlUpgrade php7-calendarUpgrade php7-pcntlUpgrade php72-dbaUpgrade php72-pspellUpgrade php7-curlUpgrade php72-pcntlUpgrade php7-wddxUpgrade php72-wddxUpgrade php72-pharUpgrade php7-snmpUpgrade php5-gdUpgrade php5-suhosinUpgrade php72-zipUpgrade php72-iconvUpgrade php5-pearUpgrade php7-tokenizerUpgrade php7-fileinfoUpgrade php5-odbcUpgrade php7-mcryptUpgrade php72-odbcUpgrade php5-intlUpgrade php7-sysvshmUpgrade php72-socketsUpgrade php5-tokenizerUpgrade php72-gd | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.0-fpmUpgrade php7.0-cgiUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-fpmUpgrade php5-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgiUpgrade libapache2-mod-php7.0Upgrade php7.2-cgiUpgrade php7.2-cli | May 1, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub