When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-recodeUpgrade phpUpgrade php-soapUpgrade php-pgsqlUpgrade php-mysqlndUpgrade libzip-develUpgrade php-gdUpgrade php-dbaUpgrade libzip-toolsUpgrade php-snmpUpgrade php-intlUpgrade php-cliUpgrade php-processUpgrade php-opcacheUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-develUpgrade php-gmpUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-xmlUpgrade php-dbgUpgrade php-commonUpgrade php-bcmathUpgrade libzipUpgrade php-pearUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-enchantUpgrade php-embeddedUpgrade php-json | May 4, 2022 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Jun 18, 2019 |
| Amazon_linux | — | Upgrade php71Upgrade php73Upgrade php72 | Jul 27, 2019 | Jun 5, 2019 |
| Centos_linux | — | Upgrade php-ldapUpgrade php-recodeUpgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-processUpgrade libzip-tools-debuginfoUpgrade php-develUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-embeddedUpgrade php-odbc-debuginfoUpgrade libzipUpgrade php-pdoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade phpUpgrade php-dbaUpgrade php-pecl-zip-debugsourceUpgrade php-gdUpgrade php-soapUpgrade php-enchantUpgrade php-debugsourceUpgrade php-gmpUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-jsonUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cliUpgrade libzip-toolsUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-odbcUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-mbstringUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pearUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlUpgrade php-opcacheUpgrade php-recode-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Debian | — | Upgrade php7.3 | Jun 4, 2019 | Jun 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-cliUpgrade phpUpgrade php-processUpgrade php-xmlUpgrade php-ldapUpgrade php-soapUpgrade php-odbcUpgrade php-pgsqlUpgrade php-gdUpgrade php-mysqlUpgrade php-pdoUpgrade php-commonUpgrade php-xmlrpc | Dec 4, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-cliUpgrade php-recodeUpgrade php-gdUpgrade php-ldapUpgrade php-xmlUpgrade php-processUpgrade php-mysqlUpgrade php-commonUpgrade php-pdoUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pgsql | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-soapUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pdoUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-odbcUpgrade php-processUpgrade php-gdUpgrade php-cliUpgrade phpUpgrade php-xmlUpgrade php-recodeUpgrade php-ldap | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade php-commonUpgrade php-soapUpgrade php-ldapUpgrade phpUpgrade php-cliUpgrade php-recodeUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-gdUpgrade php-processUpgrade php-pdo | Aug 31, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade php-mysqlndUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-enchantUpgrade php-cliUpgrade phpUpgrade php-embeddedUpgrade php-gdUpgrade libzipUpgrade php-pecl-zipUpgrade php-snmpUpgrade apcu-panelUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade libzip-develUpgrade php-dbgUpgrade php-commonUpgrade php-pgsqlUpgrade php-dbaUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-jsonUpgrade php-pearUpgrade php-develUpgrade php-soapUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-pdoUpgrade php-odbc | Sep 10, 2020 | Jun 18, 2019 |
| Php | — | Upgrade to PHP version 7.3.6Upgrade to PHP version 7.1.30Upgrade to PHP version 7.2.19 | Jun 25, 2019 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade apcu-panelUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-process-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-ldapUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-jsonUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade php-dbaUpgrade php-dbgUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoNo solution existsUpgrade php-intlUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade php-commonUpgrade libzip-toolsUpgrade php-cli-debuginfoUpgrade php-pdoUpgrade php-cliUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-mbstringUpgrade php-snmpUpgrade php-pearUpgrade php-mysqlndUpgrade php-pecl-apcuUpgrade php-processUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-embeddedUpgrade libzip-develUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade libzipUpgrade php-enchantUpgrade phpUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-intl-debuginfoUpgrade php-soap-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade phpUpgrade php-json-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-develUpgrade php-ldapUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-fpm-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade libzipUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-commonUpgrade php-dbgUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmathUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pgsqlUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-dba-debuginfoUpgrade php-cliUpgrade php-dbaUpgrade php-pecl-rrd-debuginfoUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-processUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-recodeUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-soapUpgrade php-mysqlndUpgrade php-snmpUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-recode-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-mbstring | Mar 12, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade php7-mbstringUpgrade php72-imapUpgrade php7-xmlwriterUpgrade php5-sysvshmUpgrade php72-pdoUpgrade php5-bz2Upgrade php72-shmopUpgrade php5-sysvmsgUpgrade php5-pcntlUpgrade php7-dbaUpgrade php5-xslUpgrade php7-zlibUpgrade php72-sysvmsgUpgrade php7-ctypeUpgrade php7-sysvsemUpgrade php5-odbcUpgrade php72-develUpgrade php5-shmopUpgrade php72-soapUpgrade php7-pspellUpgrade apache2-mod_php72Upgrade php72-gdUpgrade php5-soapUpgrade php5-intlUpgrade php7-mcryptUpgrade php7-enchantUpgrade php72-xslUpgrade php72-intlUpgrade php5-develUpgrade php7-pcntlUpgrade php5-gdUpgrade php72-jsonUpgrade php5-iconvUpgrade php5-pearUpgrade php5-fileinfoUpgrade php7-curlUpgrade php72-wddxUpgrade php7-opensslUpgrade php5-socketsUpgrade php7-calendarUpgrade php5-enchantUpgrade php72-posixUpgrade php7-jsonUpgrade php72-opensslUpgrade php72-pcntlUpgrade php5-tokenizerUpgrade php5Upgrade php5-fpmUpgrade php7-zipUpgrade php7-bcmathUpgrade php72-tokenizerUpgrade php72-pearUpgrade php7-fastcgiUpgrade php72-sqliteUpgrade php5-bcmathUpgrade php5-sqliteUpgrade php7-snmpUpgrade php72-mbstringUpgrade php5-calendarUpgrade php7-sysvshmUpgrade php72-gmpUpgrade php5-dbaUpgrade php7-intlUpgrade php7-sodiumUpgrade php7-wddxUpgrade php7-fileinfoUpgrade php72-domUpgrade php5-pspellUpgrade php5-zlibUpgrade php5-ctypeUpgrade php5-suhosinUpgrade php5-ldapUpgrade php72-calendarUpgrade php72-bz2Upgrade php72-pharUpgrade php5-posixUpgrade php5-curlUpgrade php5-pgsqlUpgrade php72-dbaUpgrade php72-ldapUpgrade php7-testresultsUpgrade php72-zipUpgrade php5-mbstringUpgrade php5-opensslUpgrade php72-fastcgiUpgrade php7-iconvUpgrade php72-pgsqlUpgrade php7-pearUpgrade php7-xmlrpcUpgrade php7Upgrade php72-xmlreaderUpgrade php72-bcmathUpgrade php5-mcryptUpgrade php7-gdUpgrade php72-gettextUpgrade php7-xmlreaderUpgrade php7-posixUpgrade php7-mysqlUpgrade php72-pspellUpgrade php7-tidyUpgrade php5-xmlwriterUpgrade php5-gettextUpgrade php72-fileinfoUpgrade php72-sysvshmUpgrade php7-imapUpgrade php7-odbcUpgrade php5-xmlreaderUpgrade php72-readlineUpgrade php5-fastcgiUpgrade php5-jsonUpgrade php5-imapUpgrade php72-curlUpgrade php7-fpmUpgrade php72Upgrade php5-sysvsemUpgrade php7-sqliteUpgrade php7-readlineUpgrade php7-develUpgrade php5-xmlrpcUpgrade php7-shmopUpgrade php5-pdoUpgrade php72-odbcUpgrade php7-socketsUpgrade php72-opcacheUpgrade php5-wddxUpgrade php72-fpmUpgrade php7-sysvmsgUpgrade php72-xmlrpcUpgrade php72-ctypeUpgrade php7-pgsqlUpgrade php5-exifUpgrade php72-mysqlUpgrade php72-zlibUpgrade php72-iconvUpgrade php72-socketsUpgrade php7-pharUpgrade php7-exifUpgrade php72-sysvsemUpgrade php5-pharUpgrade php7-ftpUpgrade php5-opcacheUpgrade php72-ftpUpgrade php7-pear-archive_tarUpgrade php7-gettextUpgrade php5-mysqlUpgrade php7-pdoUpgrade php7-embedUpgrade php7-opcacheUpgrade php7-xslUpgrade php5-domUpgrade php72-tidyUpgrade php72-exifUpgrade php72-enchantUpgrade php72-xmlwriterUpgrade php7-ldapUpgrade php7-tokenizerUpgrade php5-gmpUpgrade php7-firebirdUpgrade php72-snmpUpgrade apache2-mod_php7Upgrade php5-ftpUpgrade php7-gmpUpgrade php7-domUpgrade php7-bz2Upgrade php5-snmpUpgrade apache2-mod_php5Upgrade php5-zipUpgrade php7-soapUpgrade php72-pear-archive_tar | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade php7.2-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php5-fpmUpgrade php7.2-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-fpmUpgrade php7.0-cgiUpgrade php7.2-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php5-cgiUpgrade php5-cliUpgrade php7.0-cliUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5 | Jun 6, 2019 | Jun 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub