When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzip-develUpgrade php-embeddedUpgrade phpUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-odbcUpgrade php-bcmathUpgrade php-ldapUpgrade libzipUpgrade php-opcacheUpgrade php-enchantUpgrade php-snmpUpgrade php-soapUpgrade php-intlUpgrade php-pgsqlUpgrade php-recodeUpgrade php-dbgUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-mbstringUpgrade php-jsonUpgrade php-processUpgrade php-pearUpgrade php-pdoUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-develUpgrade php-xml | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-soapUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-develUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade php-jsonUpgrade php-processUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-mbstringUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-embedded-debuginfoUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade libzipUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-intlUpgrade php-ldap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-intl-debuginfoUpgrade libzip-develUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-gmp-debuginfoUpgrade php-develUpgrade php-recodeUpgrade php-snmpUpgrade php-odbcUpgrade php-mysqlndUpgrade php-ldapUpgrade php-pdoUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pearUpgrade php-json-debuginfoUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-bcmathUpgrade php-opcacheUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php73-exifUpgrade php71-exifUpgrade php72-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-ldapUpgrade php-recodeUpgrade phpUpgrade php-processUpgrade php-gdUpgrade php-xmlUpgrade php-cli | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-odbcUpgrade php-gdUpgrade php-soapUpgrade php-pdoUpgrade php-processUpgrade php-pgsqlUpgrade php-ldapUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-recodeUpgrade phpUpgrade php-cli | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-processUpgrade php-soapUpgrade php-gdUpgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-pgsqlUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-cliUpgrade php-xmlUpgrade php-pdoUpgrade php-xmlrpc | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade phpUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-develUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-bcmathUpgrade php-fpmUpgrade libzipUpgrade php-gmpUpgrade php-jsonUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-pdoUpgrade php-intlUpgrade php-dbgUpgrade php-recodeUpgrade php-xmlUpgrade php-soapUpgrade libzip-toolsUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-processUpgrade php-cliUpgrade php-gdUpgrade php-mbstringUpgrade php-snmpUpgrade php-dbaUpgrade php-commonUpgrade php-pear | Jul 22, 2024 | Apr 2, 2019 |
| Php | — | Upgrade to PHP version 7.2.17Upgrade to PHP version 7.1.28Upgrade to PHP version 7.3.4 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-snmpUpgrade php-recodeUpgrade php-gdUpgrade php-xmlrpcUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-opcache-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade php-cliUpgrade php-mysqlnd-debuginfoUpgrade php-soapUpgrade libzip-develUpgrade libzip-debugsourceUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pearUpgrade php-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade libzip-tools-debuginfoUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade php-json-debuginfoUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-pecl-zipUpgrade php-ldapUpgrade libzipUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-enchantNo solution existsUpgrade libzip-debuginfoUpgrade php-mysqlndUpgrade php-commonUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-debugsourceUpgrade php-bcmathUpgrade php-xmlUpgrade php-fpmUpgrade phpUpgrade php-gd-debuginfoUpgrade apcu-panel | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-xmlrpcUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade phpUpgrade php-mysqlndUpgrade php-fpmUpgrade php-intlUpgrade php-debugsourceUpgrade php-pdoUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-ldapUpgrade php-odbc-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-dbaUpgrade libzipUpgrade php-process-debuginfoUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-embeddedUpgrade php-develUpgrade php-processUpgrade php-dbg-debuginfoUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade php-gmpUpgrade php-xml-debuginfoUpgrade php-snmpUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-odbcUpgrade php-commonUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-cliUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-xmlUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-debuginfo | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php5-xmlrpcUpgrade php7-pharUpgrade php5-iconvUpgrade apache2-mod_php5Upgrade php72-mysqlUpgrade php72-odbcUpgrade php72-snmpUpgrade php72-pgsqlUpgrade php7-ldapUpgrade php5-jsonUpgrade php7-socketsUpgrade php7-wddxUpgrade php72-readlineUpgrade php7-gettextUpgrade php72-curlUpgrade php5-sysvsemUpgrade php72-xmlwriterUpgrade php7-domUpgrade php72-xmlrpcUpgrade php7-posixUpgrade apache2-mod_php7Upgrade php5-bcmathUpgrade php72-fastcgiUpgrade php7-tidyUpgrade php72-sqliteUpgrade php72-bcmathUpgrade php5-exifUpgrade php5-posixUpgrade php72-zipUpgrade php72-ldapUpgrade php5-pdoUpgrade php72-xmlreaderUpgrade php7-sqliteUpgrade php7-fastcgiUpgrade php7-exifUpgrade php72-iconvUpgrade php7-zlibUpgrade php7-shmopUpgrade php5-imapUpgrade php7-pgsqlUpgrade php5-ftpUpgrade php72-gettextUpgrade php5Upgrade php7-ftpUpgrade php5-mbstringUpgrade php5-domUpgrade php7-jsonUpgrade php7-sysvsemUpgrade php5-zipUpgrade php72-ctypeUpgrade php7-tokenizerUpgrade php5-socketsUpgrade php5-xmlreaderUpgrade php7Upgrade php7-xmlwriterUpgrade php72-pspellUpgrade php7-develUpgrade php7-soapUpgrade php7-curlUpgrade php7-pdoUpgrade php72-soapUpgrade php72-socketsUpgrade php72-zlibUpgrade php7-enchantUpgrade php5-gettextUpgrade php5-wddxUpgrade php72-fpmUpgrade php5-mcryptUpgrade php72-ftpUpgrade php5-ctypeUpgrade php72-imapUpgrade php5-pharUpgrade php7-bcmathUpgrade php7-embedUpgrade php7-pcntlUpgrade php5-xslUpgrade php7-sysvmsgUpgrade php5-opensslUpgrade php5-sysvmsgUpgrade php5-xmlwriterUpgrade php72-sysvsemUpgrade php7-iconvUpgrade php7-snmpUpgrade php7-gdUpgrade php72-pdoUpgrade php5-fastcgiUpgrade php7-fpmUpgrade php7-mbstringUpgrade php72Upgrade php72-gmpUpgrade php72-pear-archive_tarUpgrade php7-opensslUpgrade php7-xslUpgrade php72-xslUpgrade php5-pgsqlUpgrade php5-mysqlUpgrade php7-dbaUpgrade php72-bz2Upgrade php72-tokenizerUpgrade php5-dbaUpgrade php7-sodiumUpgrade php5-tokenizerUpgrade php72-opcacheUpgrade php7-xmlreaderUpgrade php7-gmpUpgrade php7-calendarUpgrade php7-bz2Upgrade php5-odbcUpgrade php5-enchantUpgrade php7-mysqlUpgrade php5-curlUpgrade php5-gmpUpgrade php72-pearUpgrade php72-intlUpgrade php72-exifUpgrade php7-xmlrpcUpgrade php7-pear-archive_tarUpgrade php5-fileinfoUpgrade php5-bz2Upgrade php7-pearUpgrade php5-fpmUpgrade php5-gdUpgrade php5-ldapUpgrade php5-pspellUpgrade php5-zlibUpgrade php7-fileinfoUpgrade php5-pcntlUpgrade php7-intlUpgrade php5-sysvshmUpgrade php5-opcacheUpgrade php7-sysvshmUpgrade php72-fileinfoUpgrade php5-shmopUpgrade php72-jsonUpgrade php5-snmpUpgrade php7-readlineUpgrade php72-mbstringUpgrade php5-sqliteUpgrade php72-sysvmsgUpgrade php72-opensslUpgrade php72-enchantUpgrade php72-shmopUpgrade php72-tidyUpgrade php7-zipUpgrade php7-mcryptUpgrade php7-ctypeUpgrade php5-suhosinUpgrade php72-sysvshmUpgrade php7-imapUpgrade php72-gdUpgrade php72-calendarUpgrade php72-domUpgrade php7-pspellUpgrade apache2-mod_php72Upgrade php5-calendarUpgrade php5-develUpgrade php72-develUpgrade php7-firebirdUpgrade php5-intlUpgrade php72-pcntlUpgrade php5-pearUpgrade php72-posixUpgrade php5-soapUpgrade php72-wddxUpgrade php7-opcacheUpgrade php7-odbcUpgrade php72-dbaUpgrade php7-testresultsUpgrade php72-phar | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.0-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.2-fpmUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php7.2-cliUpgrade php5-cliUpgrade libapache2-mod-php7.0Upgrade php5-fpmUpgrade libapache2-mod-php7.2Upgrade php5-cgiUpgrade php7.2-cgi | May 1, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub