When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-soapUpgrade php-pgsqlUpgrade libzip-develUpgrade php-cliUpgrade php-mysqlndUpgrade php-intlUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-processUpgrade php-snmpUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-opcacheUpgrade phpUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-gdUpgrade php-dbaUpgrade php-fpmUpgrade php-gmpUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-enchantUpgrade php-pearUpgrade php-xmlUpgrade php-dbgUpgrade php-ldapUpgrade php-develUpgrade php-bcmathUpgrade php-embeddedUpgrade php-jsonUpgrade php-odbcUpgrade php-commonUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade libzip | May 4, 2022 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Jun 18, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php71 | Jul 27, 2019 | Jun 5, 2019 |
| Centos_linux | — | Upgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-processUpgrade php-soapUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade php-enchantUpgrade php-gmpUpgrade php-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-gdUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-process-debuginfoUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-recodeUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-dbaUpgrade libzipUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-gmp-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade php-pearUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-intl-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-enchant-debuginfoUpgrade libzip-toolsUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-commonUpgrade apcu-panelUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-ldap-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade libzip-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Debian | — | Upgrade php7.3 | Jun 4, 2019 | Jun 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-mysqlUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-gdUpgrade php-odbcUpgrade php-soapUpgrade php-pgsqlUpgrade phpUpgrade php-ldapUpgrade php-xmlUpgrade php-cliUpgrade php-recodeUpgrade php-process | Dec 4, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-recodeUpgrade php-processUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade php-gdUpgrade phpUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pdoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-commonUpgrade php-mysql | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-xmlUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-recodeUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-pdoUpgrade php-soapUpgrade php-commonUpgrade php-xmlrpcUpgrade php-processUpgrade php-odbc | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-commonUpgrade php-recodeUpgrade php-odbcUpgrade php-cliUpgrade php-ldapUpgrade phpUpgrade php-soapUpgrade php-fpmUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-processUpgrade php-gd | Aug 31, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-dbaUpgrade php-pearUpgrade php-jsonUpgrade php-processUpgrade php-gmpUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-pdoUpgrade php-commonUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-bcmathUpgrade php-enchantUpgrade php-cliUpgrade php-snmpUpgrade libzipUpgrade php-embeddedUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-gdUpgrade phpUpgrade php-opcacheUpgrade php-mysqlndUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-recodeUpgrade php-dbgUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-intl | Sep 10, 2020 | Jun 18, 2019 |
| Php | — | Upgrade to PHP version 7.3.6Upgrade to PHP version 7.2.19Upgrade to PHP version 7.1.30 | Jun 25, 2019 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade phpUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-develUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-enchant-debuginfoUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade libzipUpgrade php-pearUpgrade php-snmpUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-common-debuginfoUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-opcacheUpgrade libzip-develUpgrade php-processUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-process-debuginfoUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstring-debuginfoNo solution existsUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-xml-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-gmpUpgrade php-jsonUpgrade php-ldapUpgrade php-odbcUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-gdUpgrade php-dbaUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-commonUpgrade php-json-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade php-soap-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-intl-debuginfoUpgrade libzip-toolsUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-enchantUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-snmp-debuginfoUpgrade php-mysqlndUpgrade php-snmpUpgrade php-soapUpgrade php-mysqlnd-debuginfoUpgrade php-recodeUpgrade php-debugsourceUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebugUpgrade php-pdo-debuginfoUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-bcmathUpgrade php-embedded-debuginfoUpgrade php-dba-debuginfoUpgrade libzipUpgrade php-ldapUpgrade libzip-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpmUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-develUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-process-debuginfoUpgrade phpUpgrade php-xmlrpc-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-json-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-common-debuginfoUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-commonUpgrade php-mbstring | Mar 12, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade php72-domUpgrade php7-fastcgiUpgrade php5-bcmathUpgrade php7-fileinfoUpgrade php72-dbaUpgrade php5-zlibUpgrade php5-pspellUpgrade php72-mbstringUpgrade php7-wddxUpgrade php5-fileinfoUpgrade php72-pdoUpgrade php72-develUpgrade php7-calendarUpgrade apache2-mod_php72Upgrade php72-gdUpgrade php72-shmopUpgrade php7-ctypeUpgrade php7-zlibUpgrade php7-xmlwriterUpgrade php5-pearUpgrade php7-dbaUpgrade php7-enchantUpgrade php5-iconvUpgrade php5-bz2Upgrade php7-intlUpgrade php5-sysvmsgUpgrade php5-develUpgrade php5-socketsUpgrade php72-imapUpgrade php7-sodiumUpgrade php7-snmpUpgrade php72-opensslUpgrade php5-gdUpgrade php72-pharUpgrade php5-calendarUpgrade php5-intlUpgrade php5-shmopUpgrade php7-pcntlUpgrade php5-soapUpgrade php72-jsonUpgrade php5-curlUpgrade php5-ctypeUpgrade php72-sysvmsgUpgrade php7-mcryptUpgrade php5-posixUpgrade php72-soapUpgrade php72-pearUpgrade php7-sysvsemUpgrade php5-dbaUpgrade php5-tokenizerUpgrade php7-sysvshmUpgrade php5-ldapUpgrade php72-pcntlUpgrade php5-odbcUpgrade php5-xslUpgrade php72-xslUpgrade php7-curlUpgrade php7-testresultsUpgrade php5-pgsqlUpgrade php7-mbstringUpgrade php7-opensslUpgrade php72-ldapUpgrade php72-gmpUpgrade php72-calendarUpgrade php5-suhosinUpgrade php72-intlUpgrade php7-zipUpgrade php72-posixUpgrade php7-jsonUpgrade php5-enchantUpgrade php72-sqliteUpgrade php5-sysvshmUpgrade php7-bcmathUpgrade php72-bz2Upgrade php5Upgrade php7-pspellUpgrade php5-pcntlUpgrade php72-zipUpgrade php72-wddxUpgrade php72-tokenizerUpgrade php5-sqliteUpgrade php5-fpmUpgrade php5-opensslUpgrade php72-fpmUpgrade php72-iconvUpgrade php7-odbcUpgrade php72-snmpUpgrade php7-imapUpgrade php72-pspellUpgrade php72-socketsUpgrade php5-sysvsemUpgrade php72-bcmathUpgrade php7-readlineUpgrade php5-xmlreaderUpgrade php72-opcacheUpgrade php5-exifUpgrade php5-pdoUpgrade php7-pgsqlUpgrade php5-wddxUpgrade php72-zlibUpgrade php72-xmlreaderUpgrade php72-ctypeUpgrade php7-sysvmsgUpgrade php72-xmlrpcUpgrade php72-mysqlUpgrade php7-pear-archive_tarUpgrade php72-pgsqlUpgrade php5-mbstringUpgrade php7-ldapUpgrade php7-tidyUpgrade php72-curlUpgrade php5-gmpUpgrade php7-pearUpgrade php5-xmlwriterUpgrade php7-gmpUpgrade php72Upgrade php7Upgrade php7-gdUpgrade php7-embedUpgrade php5-mysqlUpgrade php72-tidyUpgrade php7-opcacheUpgrade php7-gettextUpgrade php72-ftpUpgrade php7-pdoUpgrade php72-enchantUpgrade php72-gettextUpgrade php72-xmlwriterUpgrade php72-exifUpgrade php7-xslUpgrade php5-domUpgrade php7-pharUpgrade php7-xmlrpcUpgrade php5-pharUpgrade php72-sysvsemUpgrade php5-imapUpgrade php7-posixUpgrade php7-bz2Upgrade php7-iconvUpgrade php5-jsonUpgrade php7-tokenizerUpgrade php7-domUpgrade php72-fastcgiUpgrade apache2-mod_php5Upgrade php5-snmpUpgrade php5-gettextUpgrade php5-opcacheUpgrade php72-fileinfoUpgrade php7-soapUpgrade php5-zipUpgrade php72-pear-archive_tarUpgrade php5-ftpUpgrade php7-sqliteUpgrade php7-develUpgrade php7-socketsUpgrade php7-shmopUpgrade php72-odbcUpgrade php5-fastcgiUpgrade php72-sysvshmUpgrade php5-xmlrpcUpgrade php7-fpmUpgrade php5-mcryptUpgrade php7-xmlreaderUpgrade php7-mysqlUpgrade apache2-mod_php7Upgrade php7-ftpUpgrade php7-firebirdUpgrade php72-readlineUpgrade php7-exif | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php7.0-cliUpgrade php7.0-fpmUpgrade php7.2-fpmUpgrade php7.0-cgiUpgrade libapache2-mod-php7.2Upgrade php5-cliUpgrade libapache2-mod-php5Upgrade php5-cli (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php5-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-cgi | Jun 6, 2019 | Jun 5, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub