When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-commonUpgrade php-embeddedUpgrade php-odbcUpgrade libzipUpgrade php-dbgUpgrade php-enchantUpgrade php-jsonUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-pdoUpgrade php-gmpUpgrade php-fpmUpgrade php-xmlUpgrade php-ldapUpgrade libzip-develUpgrade php-opcacheUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-cliUpgrade php-intlUpgrade php-gdUpgrade phpUpgrade php-recodeUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-processUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-dbaUpgrade php-mysqlndUpgrade php-soapUpgrade php-pecl-rrd | May 4, 2022 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Jun 18, 2019 |
| Amazon_linux | — | Upgrade php71Upgrade php73Upgrade php72 | Jul 27, 2019 | Jun 5, 2019 |
| Centos_linux | — | Upgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfoUpgrade php-gdUpgrade php-recodeUpgrade php-jsonUpgrade php-processUpgrade php-embeddedUpgrade php-odbc-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-rrdUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade libzipUpgrade phpUpgrade php-fpm-debuginfoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-develUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-enchantUpgrade php-debugsourceUpgrade php-bcmathUpgrade php-ldapUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-gmp-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-commonUpgrade php-xmlrpcUpgrade php-xmlUpgrade apcu-panelUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-dbgUpgrade php-intl-debuginfoUpgrade libzip-debuginfoUpgrade php-pearUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-xml-debuginfo | Apr 29, 2020 | Jun 19, 2019 |
| Debian | — | Upgrade php7.3 | Jun 4, 2019 | Jun 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-mysqlUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-gdUpgrade php-pgsqlUpgrade php-soapUpgrade php-odbcUpgrade phpUpgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade php-process | Dec 4, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-mysqlUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pgsqlUpgrade php-commonUpgrade php-pdoUpgrade php-odbcUpgrade php-processUpgrade php-xmlUpgrade php-recodeUpgrade php-gdUpgrade php-ldapUpgrade phpUpgrade php-cli | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade phpUpgrade php-ldapUpgrade php-xmlUpgrade php-gdUpgrade php-cliUpgrade php-recodeUpgrade php-soapUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-processUpgrade php-odbcUpgrade php-pdoUpgrade php-common | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-fpmUpgrade php-gdUpgrade php-processUpgrade phpUpgrade php-soapUpgrade php-odbcUpgrade php-commonUpgrade php-recodeUpgrade php-ldapUpgrade php-cli | Aug 31, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade php-odbcUpgrade php-mbstringUpgrade php-soapUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pearUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-pgsqlUpgrade php-develUpgrade php-gmpUpgrade php-commonUpgrade php-pecl-rrdUpgrade libzipUpgrade apcu-panelUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-bcmathUpgrade libzip-develUpgrade php-intlUpgrade php-gdUpgrade php-embeddedUpgrade phpUpgrade php-snmpUpgrade php-enchantUpgrade php-cliUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-dbgUpgrade php-opcacheUpgrade php-recode | Sep 10, 2020 | Jun 18, 2019 |
| Php | — | Upgrade to PHP version 7.2.19Upgrade to PHP version 7.1.30Upgrade to PHP version 7.3.6 | Jun 25, 2019 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade libzipUpgrade php-enchant-debuginfoUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-debugsourceUpgrade phpUpgrade php-xmlUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-recode-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-recodeUpgrade php-pearUpgrade libzip-develUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-cliUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-pdoUpgrade php-odbc-debuginfoUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade apcu-panelUpgrade php-xmlrpc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-cli-debuginfoUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade php-gmpUpgrade php-odbcNo solution existsUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-gdUpgrade php-pecl-zip-debuginfoUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-jsonUpgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debugsource | Apr 29, 2020 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade php-snmpUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-processUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-debuginfoUpgrade php-mysqlndUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-dbaUpgrade php-enchantUpgrade php-recode-debuginfoUpgrade php-intl-debuginfoUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-soap-debuginfoUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mbstringUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-pecl-rrd-debugsourceUpgrade php-pdo-debuginfoUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade phpUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-dba-debuginfoUpgrade php-pdoUpgrade php-embedded-debuginfoUpgrade libzipUpgrade php-pecl-zipUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-embeddedUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-dbgUpgrade php-process-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-develUpgrade php-fpm | Mar 12, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade php7Upgrade php7-ldapUpgrade php5-exifUpgrade php5-mbstringUpgrade php7-pgsqlUpgrade php5-gmpUpgrade php5-xmlwriterUpgrade php7-gmpUpgrade php72-sysvshmUpgrade php7-tidyUpgrade php72Upgrade php72-curlUpgrade php7-develUpgrade php7-firebirdUpgrade php7-mysqlUpgrade php7-pear-archive_tarUpgrade php72-fileinfoUpgrade php5-mcryptUpgrade php7-fpmUpgrade apache2-mod_php7Upgrade php7-xmlreaderUpgrade php7-ftpUpgrade php72-readlineUpgrade php5-xmlreaderUpgrade php7-imapUpgrade php5-fastcgiUpgrade php7-odbcUpgrade php72-snmpUpgrade php72-pspellUpgrade php5-pharUpgrade php72-zlibUpgrade php72-xmlreaderUpgrade php7-sysvmsgUpgrade php72-mysqlUpgrade php5-wddxUpgrade php72-ctypeUpgrade php72-fpmUpgrade php7-pearUpgrade php7-exifUpgrade php72-socketsUpgrade php5-opcacheUpgrade php72-sysvsemUpgrade php7-tokenizerUpgrade php7-xmlrpcUpgrade php5-imapUpgrade php72-pear-archive_tarUpgrade php5-ftpUpgrade php72-pgsqlUpgrade php7-pharUpgrade php72-iconvUpgrade apache2-mod_php5Upgrade php72-xmlrpcUpgrade php72-fastcgiUpgrade php5-gettextUpgrade php7-iconvUpgrade php7-posixUpgrade php72-bcmathUpgrade php5-zipUpgrade php7-socketsUpgrade php7-domUpgrade php5-sysvsemUpgrade php5-xmlrpcUpgrade php72-opcacheUpgrade php7-soapUpgrade php5-snmpUpgrade php7-bz2Upgrade php7-xslUpgrade php5-jsonUpgrade php5-opensslUpgrade php5-domUpgrade php72-gettextUpgrade php5-pdoUpgrade php7-sqliteUpgrade php72-odbcUpgrade php7-gdUpgrade php7-shmopUpgrade php7-readlineUpgrade php7-gettextUpgrade php7-embedUpgrade php72-enchantUpgrade php7-opcacheUpgrade php72-exifUpgrade php72-tidyUpgrade php7-pdoUpgrade php72-ftpUpgrade php5-mysqlUpgrade php72-xmlwriterUpgrade php5-socketsUpgrade php5-gdUpgrade php5-iconvUpgrade php72-xslUpgrade php7-jsonUpgrade php5-develUpgrade php5-fileinfoUpgrade php7-mcryptUpgrade php5-pearUpgrade php7-enchantUpgrade php7-ctypeUpgrade php72-wddxUpgrade php7-fileinfoUpgrade php72-dbaUpgrade php5-enchantUpgrade php7-calendarUpgrade php7-curlUpgrade php72-zipUpgrade php5-odbcUpgrade php7-opensslUpgrade php72-gmpUpgrade php72-tokenizerUpgrade php7-sodiumUpgrade apache2-mod_php72Upgrade php5-ldapUpgrade php7-sysvshmUpgrade php7-pspellUpgrade php72-gdUpgrade php7-xmlwriterUpgrade php5-sysvshmUpgrade php72-develUpgrade php72-bz2Upgrade php5-xslUpgrade php7-zlibUpgrade php72-shmopUpgrade php5-pcntlUpgrade php5-sysvmsgUpgrade php72-pdoUpgrade php72-intlUpgrade php72-sqliteUpgrade php7-bcmathUpgrade php7-fastcgiUpgrade php5-ctypeUpgrade php5-posixUpgrade php5-pspellUpgrade php5-zlibUpgrade php7-intlUpgrade php7-wddxUpgrade php5-calendarUpgrade php72-domUpgrade php5-bcmathUpgrade php72-pearUpgrade php72-mbstringUpgrade php7-snmpUpgrade php7-dbaUpgrade php5Upgrade php5-shmopUpgrade php7-sysvsemUpgrade php7-mbstringUpgrade php7-zipUpgrade php5-fpmUpgrade php5-sqliteUpgrade php72-posixUpgrade php72-soapUpgrade php72-pcntlUpgrade php72-opensslUpgrade php5-tokenizerUpgrade php5-curlUpgrade php5-dbaUpgrade php72-pharUpgrade php72-calendarUpgrade php72-ldapUpgrade php7-testresultsUpgrade php5-pgsqlUpgrade php5-suhosinUpgrade php72-sysvmsgUpgrade php7-pcntlUpgrade php5-intlUpgrade php72-jsonUpgrade php5-soapUpgrade php72-imapUpgrade php5-bz2 | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade php7.2-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-fpmUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-cliUpgrade libapache2-mod-php7.0Upgrade php5-fpm (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.0-cgiUpgrade php7.2-fpmUpgrade php7.0-fpmUpgrade php5-cgiUpgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5 | Jun 6, 2019 | Jun 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub