When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-odbcUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-cliUpgrade libzip-develUpgrade php-dbaUpgrade php-pgsqlUpgrade php-snmpUpgrade libzip-toolsUpgrade php-xmlUpgrade php-processUpgrade php-commonUpgrade php-mbstringUpgrade php-recodeUpgrade libzipUpgrade apcu-panelUpgrade php-gdUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade phpUpgrade php-bcmathUpgrade php-pearUpgrade php-ldapUpgrade php-soapUpgrade php-develUpgrade php-opcacheUpgrade php-dbgUpgrade php-enchantUpgrade php-intlUpgrade php-jsonUpgrade php-pdoUpgrade php-gmp | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-intlUpgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-xmlUpgrade php-fpmUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-develUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-bcmathUpgrade php-ldapUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade apcu-panelUpgrade php-cli-debuginfoUpgrade php-debugsourceUpgrade libzipUpgrade php-gdUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-gd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-embeddedUpgrade php-enchantUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pearUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-dbaUpgrade php-dbg-debuginfoUpgrade php-jsonUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade libzip-toolsUpgrade php-soapUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-recodeUpgrade libzip-debugsourceUpgrade php-cliUpgrade php-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php72-exifUpgrade php73-exifUpgrade php71-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade phpUpgrade php-ldapUpgrade php-commonUpgrade php-pdoUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-processUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-gdUpgrade php-soap | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-processUpgrade php-commonUpgrade php-pgsqlUpgrade php-soapUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-mysqlUpgrade php-odbcUpgrade php-ldapUpgrade phpUpgrade php-pdoUpgrade php-cliUpgrade php-gdUpgrade php-recode | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-processUpgrade phpUpgrade php-soapUpgrade php-gdUpgrade php-pdoUpgrade php-ldapUpgrade php-pgsqlUpgrade php-cliUpgrade php-mysqlUpgrade php-recodeUpgrade php-commonUpgrade php-xmlUpgrade php-odbcUpgrade php-xmlrpc | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade php-opcacheUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-snmpUpgrade php-intlUpgrade libzip-toolsUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade libzip-develUpgrade php-dbaUpgrade php-mbstringUpgrade php-commonUpgrade php-xmlrpcUpgrade php-processUpgrade php-odbcUpgrade phpUpgrade php-jsonUpgrade php-soapUpgrade libzipUpgrade php-bcmathUpgrade php-pdoUpgrade php-gmpUpgrade php-pearUpgrade php-fpmUpgrade php-ldapUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-gd | Jul 22, 2024 | Mar 16, 2019 |
| Php | — | Upgrade to PHP version 7.2.17Upgrade to PHP version 7.1.28Upgrade to PHP version 7.3.4 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-ldapUpgrade libzipUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-jsonUpgrade php-embeddedUpgrade php-gd-debuginfoUpgrade php-json-debuginfoUpgrade php-develUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoNo solution existsUpgrade php-gmpUpgrade libzip-debuginfoUpgrade php-bcmathUpgrade phpUpgrade php-enchantUpgrade php-enchant-debuginfoUpgrade php-recode-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-debugsourceUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-pearUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-snmpUpgrade php-commonUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-bcmath-debuginfoUpgrade php-gdUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade apcu-panelUpgrade libzip-develUpgrade php-pgsql-debuginfoUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-processUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade php-soapUpgrade php-cli-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-dbg-debuginfoUpgrade php-snmpUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-ldapUpgrade libzip-develUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-dba-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-jsonUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade php-develUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-dbaUpgrade php-commonUpgrade php-soapUpgrade php-processUpgrade php-process-debuginfoUpgrade php-pdoUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-gdUpgrade php-xml-debuginfo | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php5-calendarUpgrade php5-xslUpgrade php5-mcryptUpgrade php72-xmlwriterUpgrade php7-gmpUpgrade php7-iconvUpgrade php7-gettextUpgrade php5-exifUpgrade php72-curlUpgrade php72-tidyUpgrade php72-sysvsemUpgrade php72-bcmathUpgrade php72-readlineUpgrade php7-opcacheUpgrade php72-fileinfoUpgrade php5-gmpUpgrade php7-mbstringUpgrade php5-snmpUpgrade php7-dbaUpgrade php7-tidyUpgrade php72-mysqlUpgrade php5-imapUpgrade php5-jsonUpgrade php7-bz2Upgrade php72-zlibUpgrade php7-fpmUpgrade php72-snmpUpgrade php5-wddxUpgrade php7-pgsqlUpgrade php72-mbstringUpgrade php72-fpmUpgrade php7Upgrade php7-embedUpgrade php7-socketsUpgrade php7-pdoUpgrade php72-exifUpgrade php7-sqliteUpgrade php7-exifUpgrade php5-xmlwriterUpgrade php5-bz2Upgrade php7-firebirdUpgrade php72-shmopUpgrade php5-fastcgiUpgrade php7-jsonUpgrade php5-opensslUpgrade php7-sysvmsgUpgrade php72-xmlreaderUpgrade php5-xmlreaderUpgrade php7-xmlrpcUpgrade php7-domUpgrade php72-xmlrpcUpgrade php5-ftpUpgrade php7-sodiumUpgrade php5-gettextUpgrade php7-gdUpgrade php72-sysvshmUpgrade php7-ldapUpgrade php5-xmlrpcUpgrade php7-imapUpgrade php72-sqliteUpgrade php5Upgrade php7-xmlreaderUpgrade php5-zipUpgrade apache2-mod_php7Upgrade php5-mysqlUpgrade php72-ftpUpgrade php72Upgrade php7-posixUpgrade php5-sysvsemUpgrade php7-xslUpgrade php5-mbstringUpgrade php7-readlineUpgrade php72-posixUpgrade php7-soapUpgrade php5-pharUpgrade php5-pdoUpgrade php5-soapUpgrade apache2-mod_php5Upgrade php72-pgsqlUpgrade php5-shmopUpgrade php7-ftpUpgrade php5-opcacheUpgrade php72-ctypeUpgrade php5-bcmathUpgrade php7-pear-archive_tarUpgrade php72-opcacheUpgrade php72-gettextUpgrade php72-tokenizerUpgrade php5-pspellUpgrade php72-opensslUpgrade php5-fileinfoUpgrade php7-pharUpgrade php7-fileinfoUpgrade php7-tokenizerUpgrade php5-sysvmsgUpgrade php7-xmlwriterUpgrade php72-sysvmsgUpgrade php5-odbcUpgrade php72-wddxUpgrade php7-odbcUpgrade php7-pearUpgrade php72-domUpgrade php5-domUpgrade php5-socketsUpgrade php7-pspellUpgrade php5-iconvUpgrade php72-pear-archive_tarUpgrade php72-odbcUpgrade php5-intlUpgrade php72-enchantUpgrade php7-bcmathUpgrade php5-dbaUpgrade php72-fastcgiUpgrade php72-iconvUpgrade php72-calendarUpgrade php72-socketsUpgrade php7-mcryptUpgrade php7-shmopUpgrade php5-suhosinUpgrade php72-pcntlUpgrade php7-wddxUpgrade php5-gdUpgrade php72-pdoUpgrade php7-snmpUpgrade php5-pcntlUpgrade php5-pearUpgrade php72-gdUpgrade php7-intlUpgrade php72-intlUpgrade php5-pgsqlUpgrade apache2-mod_php72Upgrade php7-testresultsUpgrade php5-fpmUpgrade php5-ldapUpgrade php7-mysqlUpgrade php72-gmpUpgrade php72-jsonUpgrade php72-pharUpgrade php5-enchantUpgrade php5-curlUpgrade php7-sysvshmUpgrade php5-tokenizerUpgrade php7-ctypeUpgrade php7-zlibUpgrade php7-curlUpgrade php7-develUpgrade php72-zipUpgrade php72-dbaUpgrade php5-develUpgrade php72-bz2Upgrade php5-ctypeUpgrade php5-posixUpgrade php7-sysvsemUpgrade php72-develUpgrade php72-imapUpgrade php72-soapUpgrade php7-calendarUpgrade php72-xslUpgrade php7-pcntlUpgrade php72-pspellUpgrade php5-sysvshmUpgrade php5-sqliteUpgrade php5-zlibUpgrade php72-pearUpgrade php7-zipUpgrade php7-fastcgiUpgrade php72-ldapUpgrade php7-opensslUpgrade php7-enchant | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade php7.2-cliUpgrade php7.2-cgiUpgrade php5-fpmUpgrade php5-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-fpmUpgrade php7.0-cgiUpgrade libapache2-mod-php7.2Upgrade php7.0-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php5-cliUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade libapache2-mod-php5 | May 1, 2019 | Apr 18, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub