When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-xmlUpgrade php-jsonUpgrade php-develUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pearUpgrade php-gmpUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-intlUpgrade php-soapUpgrade phpUpgrade php-opcacheUpgrade libzip-develUpgrade php-recodeUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-odbcUpgrade php-pgsqlUpgrade php-dbaUpgrade php-cliUpgrade php-dbgUpgrade php-snmpUpgrade php-ldapUpgrade apcu-panelUpgrade libzipUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-embedded | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php71 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-enchantUpgrade php-debugsourceUpgrade php-soapUpgrade php-xmlrpcUpgrade php-odbc-debuginfoUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-processUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-intl-debuginfoUpgrade php-jsonUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debugsourceUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-cli-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-dbgUpgrade php-odbcUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade libzip-debuginfoUpgrade php-pearUpgrade php-mbstring-debuginfoUpgrade php-recodeUpgrade php-commonUpgrade php-fpmUpgrade php-ldapUpgrade php-dba-debuginfoUpgrade php-pdoUpgrade php-xmlUpgrade php-bcmathUpgrade php-snmpUpgrade php-recode-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php73-exifUpgrade php71-exifUpgrade php72-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pdoUpgrade php-soapUpgrade phpUpgrade php-ldapUpgrade php-recodeUpgrade php-gdUpgrade php-xmlUpgrade php-cliUpgrade php-processUpgrade php-pgsqlUpgrade php-odbcUpgrade php-commonUpgrade php-xmlrpcUpgrade php-mysql | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pgsqlUpgrade php-odbcUpgrade php-mysqlUpgrade php-ldapUpgrade php-commonUpgrade php-pdoUpgrade php-processUpgrade php-gdUpgrade php-soapUpgrade php-recodeUpgrade php-xmlrpcUpgrade phpUpgrade php-cliUpgrade php-xml | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-xmlUpgrade php-mysqlUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-commonUpgrade php-cliUpgrade php-gdUpgrade php-soapUpgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-processUpgrade php-pgsql | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade php-commonUpgrade php-gdUpgrade php-xmlrpcUpgrade php-processUpgrade php-pearUpgrade php-snmpUpgrade libzip-toolsUpgrade php-dbaUpgrade php-soapUpgrade libzip-develUpgrade php-mbstringUpgrade php-cliUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-develUpgrade php-enchantUpgrade php-dbgUpgrade php-odbcUpgrade php-intlUpgrade php-embeddedUpgrade php-pdoUpgrade php-opcacheUpgrade libzipUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-ldapUpgrade php-jsonUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-fpmUpgrade php | Jul 22, 2024 | Apr 2, 2019 |
| Php | — | Upgrade to PHP version 7.2.17Upgrade to PHP version 7.1.28Upgrade to PHP version 7.3.4 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-enchantUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade php-dbgUpgrade php-gd-debuginfoUpgrade php-pdoUpgrade php-opcacheUpgrade php-ldapNo solution existsUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-dba-debuginfoUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade php-jsonUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mysqlndUpgrade php-develUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-pdo-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade phpUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-gmpUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-commonUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-soapUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-gdUpgrade php-odbc-debuginfoUpgrade php-snmpUpgrade php-cli-debuginfoUpgrade php-recodeUpgrade php-processUpgrade libzip-develUpgrade libzip-toolsUpgrade php-cliUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-debuginfoUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-pecl-apcu-debugsourceUpgrade php-snmpUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-commonUpgrade php-cliUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade libzip-develUpgrade php-json-debuginfoUpgrade php-xml-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-embeddedUpgrade php-processUpgrade php-opcacheUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade php-develUpgrade php-jsonUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-enchantUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade libzipUpgrade php-intlUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-fpmUpgrade php-cli-debuginfoUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-recodeUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-gdUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-xmlrpc | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php72-xmlwriterUpgrade php5-xmlrpcUpgrade apache2-mod_php7Upgrade php72Upgrade php7-posixUpgrade php7-domUpgrade php72-mysqlUpgrade php72-readlineUpgrade php7-mbstringUpgrade apache2-mod_php5Upgrade php5-xslUpgrade php5-opensslUpgrade php72-fastcgiUpgrade php7-embedUpgrade php72-xmlrpcUpgrade php72-gmpUpgrade php72-ftpUpgrade php5-wddxUpgrade php72-imapUpgrade php7-fastcgiUpgrade php5-socketsUpgrade php5-mcryptUpgrade php72-ctypeUpgrade php7-pgsqlUpgrade php72-pdoUpgrade php72-sysvsemUpgrade php72-socketsUpgrade php5-xmlwriterUpgrade php72-soapUpgrade php72-zlibUpgrade php72-iconvUpgrade php72-pear-archive_tarUpgrade php72-odbcUpgrade php72-snmpUpgrade php7-pcntlUpgrade php72-ldapUpgrade php7-sysvmsgUpgrade php5-sysvmsgUpgrade php7-snmpUpgrade php5-gettextUpgrade php7-tidyUpgrade php7-shmopUpgrade php7-fpmUpgrade php5-pdoUpgrade php5-exifUpgrade php7-gdUpgrade php7-exifUpgrade php5-fastcgiUpgrade php72-sqliteUpgrade php72-bcmathUpgrade php7-iconvUpgrade php7-develUpgrade php5-bcmathUpgrade php7-pharUpgrade php5-iconvUpgrade php7-zlibUpgrade php7-xmlwriterUpgrade php7-curlUpgrade php5-ctypeUpgrade php72-pgsqlUpgrade php72-fpmUpgrade php5-xmlreaderUpgrade php7-ftpUpgrade php5-ftpUpgrade php7-sysvsemUpgrade php72-zipUpgrade php7-sqliteUpgrade php5-sysvsemUpgrade php7-gettextUpgrade php72-gettextUpgrade php72-curlUpgrade php72-xmlreaderUpgrade php5-jsonUpgrade php5-mbstringUpgrade php7-pdoUpgrade php7Upgrade php7-tokenizerUpgrade php7-enchantUpgrade php72-pspellUpgrade php7-socketsUpgrade php5-zipUpgrade php7-jsonUpgrade php5Upgrade php5-posixUpgrade php7-wddxUpgrade php5-domUpgrade php5-pharUpgrade php5-imapUpgrade php7-ldapUpgrade php7-soapUpgrade php7-bcmathUpgrade php5-sqliteUpgrade php7-pspellUpgrade php5-develUpgrade php7-mcryptUpgrade php72-pearUpgrade php72-exifUpgrade php5-odbcUpgrade php5-gmpUpgrade php72-intlUpgrade php7-calendarUpgrade php72-xslUpgrade php7-xmlrpcUpgrade php7-pear-archive_tarUpgrade php72-wddxUpgrade php72-tokenizerUpgrade php72-opensslUpgrade php72-sysvmsgUpgrade php72-mbstringUpgrade php72-enchantUpgrade php5-pgsqlUpgrade php5-mysqlUpgrade php7-bz2Upgrade php7-dbaUpgrade php7-mysqlUpgrade php72-shmopUpgrade php5-suhosinUpgrade php72-tidyUpgrade php5-ldapUpgrade php5-pearUpgrade php72-gdUpgrade php5-fpmUpgrade php5-bz2Upgrade php5-zlibUpgrade php5-pcntlUpgrade php7-readlineUpgrade php5-snmpUpgrade php72-jsonUpgrade php7-opcacheUpgrade php72-domUpgrade php72-develUpgrade php5-gdUpgrade php5-tokenizerUpgrade php7-pearUpgrade apache2-mod_php72Upgrade php5-intlUpgrade php7-zipUpgrade php72-pcntlUpgrade php7-ctypeUpgrade php7-opensslUpgrade php7-gmpUpgrade php7-testresultsUpgrade php7-xslUpgrade php72-opcacheUpgrade php72-dbaUpgrade php5-calendarUpgrade php72-bz2Upgrade php5-soapUpgrade php7-odbcUpgrade php5-dbaUpgrade php5-pspellUpgrade php5-shmopUpgrade php5-opcacheUpgrade php72-fileinfoUpgrade php7-intlUpgrade php7-firebirdUpgrade php5-sysvshmUpgrade php7-sysvshmUpgrade php7-fileinfoUpgrade php7-imapUpgrade php72-pharUpgrade php72-calendarUpgrade php72-posixUpgrade php7-xmlreaderUpgrade php5-enchantUpgrade php7-sodiumUpgrade php72-sysvshmUpgrade php5-curlUpgrade php5-fileinfo | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade php7.0-cgiUpgrade php7.2-fpmUpgrade php7.0-cliUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpmUpgrade libapache2-mod-php7.2Upgrade php5-cgiUpgrade libapache2-mod-php7.0Upgrade php7.2-cgi | May 1, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub