When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbaUpgrade php-bcmathUpgrade php-cliUpgrade php-pgsqlUpgrade libzip-develUpgrade php-recodeUpgrade php-soapUpgrade php-opcacheUpgrade php-snmpUpgrade php-embeddedUpgrade phpUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-enchantUpgrade apcu-panelUpgrade libzip-toolsUpgrade libzipUpgrade php-odbcUpgrade php-mysqlndUpgrade php-ldapUpgrade php-intlUpgrade php-commonUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-pearUpgrade php-processUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-fpmUpgrade php-mbstringUpgrade php-jsonUpgrade php-devel | May 4, 2022 | Apr 18, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Jun 14, 2019 | Apr 18, 2019 |
| Centos_linux | — | Upgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-pearUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-pdoUpgrade libzip-develUpgrade php-cliUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-snmpUpgrade php-dbgUpgrade php-odbcUpgrade php-mysqlndUpgrade php-develUpgrade php-recodeUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-enchantUpgrade apcu-panelUpgrade phpUpgrade php-processUpgrade php-jsonUpgrade php-fpm-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-soapUpgrade php-soap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-embeddedUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade php-opcache-debuginfoUpgrade libzipUpgrade php-dbg-debuginfoUpgrade php-xml-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Debian | — | Upgrade php7.3 | May 27, 2019 | Apr 18, 2019 |
| Freebsd | — | Upgrade php71-exifUpgrade php73-exifUpgrade php72-exif | May 11, 2019 | May 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-odbcUpgrade php-xmlUpgrade php-processUpgrade php-recodeUpgrade phpUpgrade php-pdoUpgrade php-soapUpgrade php-cliUpgrade php-gdUpgrade php-ldap | Jul 23, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-recodeUpgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-pgsqlUpgrade php-pdoUpgrade php-processUpgrade php-gdUpgrade php-ldapUpgrade php-soapUpgrade php-mysqlUpgrade php-commonUpgrade php-odbc | Sep 25, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-odbcUpgrade php-ldapUpgrade php-gdUpgrade phpUpgrade php-processUpgrade php-soapUpgrade php-pgsqlUpgrade php-commonUpgrade php-mysqlUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-cliUpgrade php-pdo | Jul 2, 2019 | Apr 18, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade php-fpmUpgrade phpUpgrade php-jsonUpgrade libzipUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-enchantUpgrade php-opcacheUpgrade php-dbgUpgrade php-pgsqlUpgrade php-develUpgrade php-intlUpgrade php-ldapUpgrade php-recodeUpgrade php-embeddedUpgrade php-pecl-zipUpgrade apcu-panelUpgrade php-pdoUpgrade php-xmlUpgrade php-bcmathUpgrade php-odbcUpgrade php-pearUpgrade php-snmpUpgrade php-processUpgrade php-dbaUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-cliUpgrade libzip-develUpgrade php-gdUpgrade php-commonUpgrade php-soapUpgrade php-xmlrpc | Jul 22, 2024 | Apr 2, 2019 |
| Php | — | Upgrade to PHP version 7.2.17Upgrade to PHP version 7.3.4Upgrade to PHP version 7.1.28 | Apr 23, 2019 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade php-common-debuginfoUpgrade php-fpm-debuginfoUpgrade php-embeddedUpgrade php-pdoUpgrade apcu-panelUpgrade php-dba-debuginfoUpgrade php-opcacheUpgrade libzipUpgrade php-commonUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-fpmUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-develUpgrade php-enchantUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade phpUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade libzip-tools-debuginfoNo solution existsUpgrade php-pdo-debuginfoUpgrade php-xmlUpgrade php-gmpUpgrade php-pgsqlUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-cli-debuginfoUpgrade php-snmpUpgrade php-recodeUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-soap-debuginfoUpgrade php-gdUpgrade libzip-develUpgrade php-cliUpgrade php-debuginfoUpgrade php-pearUpgrade php-opcache-debuginfoUpgrade php-recode-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-processUpgrade php-xml-debuginfoUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfo | Apr 29, 2020 | Apr 18, 2019 |
| Rocky_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade libzip-debugsourceUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-ldapUpgrade php-recodeUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade libzipUpgrade php-pecl-zipUpgrade php-dbg-debuginfoUpgrade php-debugsourceUpgrade php-dbaUpgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-develUpgrade php-xmlrpcUpgrade php-processUpgrade php-embeddedUpgrade php-soapUpgrade php-opcacheUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-gmpUpgrade php-bcmathUpgrade php-gdUpgrade php-enchantUpgrade phpUpgrade php-mysqlndUpgrade php-xml-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-snmpUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-odbcUpgrade php-pecl-apcuUpgrade libzip-develUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-recode-debuginfo | Mar 12, 2024 | Apr 18, 2019 |
| Suse | — | Upgrade php7-mcryptUpgrade php7-zipUpgrade php72-pcntlUpgrade php72-shmopUpgrade php7-dbaUpgrade php72-wddxUpgrade php5-fpmUpgrade php5-gdUpgrade php5-bz2Upgrade php5-ldapUpgrade php72-domUpgrade php5-pspellUpgrade php7-odbcUpgrade php5-zlibUpgrade php7-opcacheUpgrade php5-pcntlUpgrade php7-readlineUpgrade php72-fileinfoUpgrade php7-intlUpgrade php7-firebirdUpgrade php72-jsonUpgrade php5-opcacheUpgrade php5-sysvshmUpgrade php5-shmopUpgrade php7-fileinfoUpgrade php7-sysvshmUpgrade php5-snmpUpgrade php5-sqliteUpgrade php72-enchantUpgrade php5-pgsqlUpgrade php72-mbstringUpgrade php7-calendarUpgrade php7-pear-archive_tarUpgrade php5-mysqlUpgrade php72-opensslUpgrade php5-enchantUpgrade php5-fileinfoUpgrade php5-curlUpgrade php5-odbcUpgrade php7-mysqlUpgrade php5-gmpUpgrade php7-bz2Upgrade php72-sysvmsgUpgrade php7-xmlrpcUpgrade php72-exifUpgrade php7-xmlreaderUpgrade php72-intlUpgrade php7-sodiumUpgrade php72-posixUpgrade php72-calendarUpgrade php72-pearUpgrade php72-xslUpgrade php7-imapUpgrade php72-dbaUpgrade php72-opcacheUpgrade php72-tokenizerUpgrade php7-gmpUpgrade php72-develUpgrade php5-develUpgrade php5-tokenizerUpgrade php5-dbaUpgrade php72-tidyUpgrade php72-sysvshmUpgrade php72-pharUpgrade php7-pearUpgrade php5-suhosinUpgrade php7-ctypeUpgrade apache2-mod_php72Upgrade php7-opensslUpgrade php5-calendarUpgrade php7-xslUpgrade php7-testresultsUpgrade php5-soapUpgrade php72-bz2Upgrade php7-pspellUpgrade php5-pearUpgrade php5-intlUpgrade php72-gdUpgrade php72-ctypeUpgrade php72-pdoUpgrade php7-soapUpgrade php7-pdoUpgrade php72-soapUpgrade php5-ctypeUpgrade php7-fastcgiUpgrade php7-embedUpgrade php7-sysvmsgUpgrade php72-gettextUpgrade php5-ftpUpgrade php5Upgrade php7-fpmUpgrade php7-shmopUpgrade php5-socketsUpgrade php7-bcmathUpgrade php7-pgsqlUpgrade php7-snmpUpgrade php72-ldapUpgrade php5-gettextUpgrade php72-sqliteUpgrade php7-iconvUpgrade apache2-mod_php7Upgrade apache2-mod_php5Upgrade php5-iconvUpgrade php7-posixUpgrade php72-xmlrpcUpgrade php72-xmlwriterUpgrade php72-readlineUpgrade php72-mysqlUpgrade php72-fastcgiUpgrade php7-pharUpgrade php7-domUpgrade php5-xmlrpcUpgrade php5-bcmathUpgrade php72-zipUpgrade php5-pharUpgrade php7-enchantUpgrade php72-zlibUpgrade php7-tokenizerUpgrade php7-ldapUpgrade php7Upgrade php5-xslUpgrade php7-pcntlUpgrade php5-opensslUpgrade php7-zlibUpgrade php5-sysvmsgUpgrade php5-xmlreaderUpgrade php72-curlUpgrade php5-xmlwriterUpgrade php72-xmlreaderUpgrade php5-sysvsemUpgrade php7-sqliteUpgrade php7-mbstringUpgrade php72-sysvsemUpgrade php5-mbstringUpgrade php7-sysvsemUpgrade php72-pgsqlUpgrade php72-pspellUpgrade php5-pdoUpgrade php5-exifUpgrade php7-exifUpgrade php72-bcmathUpgrade php5-fastcgiUpgrade php72-iconvUpgrade php7-tidyUpgrade php7-xmlwriterUpgrade php72-imapUpgrade php7-ftpUpgrade php5-jsonUpgrade php7-jsonUpgrade php7-socketsUpgrade php7-wddxUpgrade php5-imapUpgrade php5-domUpgrade php5-posixUpgrade php5-zipUpgrade php7-gettextUpgrade php7-curlUpgrade php7-develUpgrade php72-odbcUpgrade php72-snmpUpgrade php72-pear-archive_tarUpgrade php7-gdUpgrade php5-wddxUpgrade php72-gmpUpgrade php72-socketsUpgrade php72Upgrade php5-mcryptUpgrade php72-ftpUpgrade php72-fpm | May 24, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade php7.0-cliUpgrade php5-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php7.2-fpmUpgrade libapache2-mod-php5Upgrade php7.0-fpmUpgrade php7.2-cliUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0Upgrade php5-fpmUpgrade php5-cgiUpgrade libapache2-mod-php7.2 | May 1, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub