When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-develUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-jsonUpgrade libzipUpgrade php-embeddedUpgrade php-dbaUpgrade php-soapUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-enchantUpgrade php-bcmathUpgrade php-processUpgrade php-odbcUpgrade php-xmlUpgrade php-intlUpgrade php-cliUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-snmpUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-pearUpgrade php-commonUpgrade phpUpgrade php-dbgUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-recodeUpgrade apcu-panel | May 4, 2022 | Aug 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Aug 9, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php71Upgrade php72 | Sep 19, 2019 | Aug 9, 2019 |
| Apple Osx Apachemodphp | — | Apply OS X security update 2019-006 High SierraApply OS X security update 2019-001 MojaveUpgrade macOS to the latest version | Oct 8, 2019 | Aug 9, 2019 |
| Centos_linux | — | Upgrade php-dbaUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-odbcUpgrade php-cli-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-pecl-xdebugUpgrade php-dbgUpgrade php-xmlrpcUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade php-develUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debuginfoUpgrade php-json-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-pearUpgrade apcu-panelUpgrade php-pecl-rrd-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-processUpgrade php-debuginfoUpgrade php-mysqlndUpgrade php-xmlUpgrade php-snmpUpgrade libzip-develUpgrade php-recode-debuginfoUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-toolsUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-recodeUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cliUpgrade php-soap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfo | Apr 29, 2020 | Aug 9, 2019 |
| Debian | — | Upgrade php7.3 | Aug 14, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-gdUpgrade php-pgsqlUpgrade php-soapUpgrade php-processUpgrade php-ldapUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-commonUpgrade phpUpgrade php-cliUpgrade php-mysql | Dec 4, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pdoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-cliUpgrade php-processUpgrade php-xmlUpgrade php-mysqlUpgrade php-gdUpgrade php-odbcUpgrade php-commonUpgrade php-soapUpgrade php-ldapUpgrade php-pgsqlUpgrade php | Sep 25, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade phpUpgrade php-gdUpgrade php-soapUpgrade php-recodeUpgrade php-fpmUpgrade php-pdoUpgrade php-xmlUpgrade php-commonUpgrade php-cliUpgrade php-odbcUpgrade php-processUpgrade php-xmlrpc | Sep 30, 2019 | Aug 9, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 9, 2019 |
| Oracle_linux | — | Upgrade php-develUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-processUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade php-soapUpgrade php-pearUpgrade php-jsonUpgrade php-commonUpgrade php-fpmUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pdoUpgrade php-snmpUpgrade php-dbgUpgrade libzipUpgrade php-recodeUpgrade php-bcmathUpgrade phpUpgrade php-embeddedUpgrade php-gdUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade libzip-develUpgrade apcu-panelUpgrade php-enchantUpgrade php-intlUpgrade libzip-toolsUpgrade php-ldapUpgrade php-mysqlndUpgrade php-cli | Sep 10, 2020 | Aug 9, 2019 |
| Php | — | Upgrade to PHP version 7.1.31Upgrade to PHP version 7.3.8Upgrade to PHP version 7.2.21 | Aug 27, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade libzip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-toolsUpgrade php-cli-debuginfoUpgrade php-snmpUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-pecl-rrdUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-intl-debuginfoUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-commonUpgrade php-pearNo solution existsUpgrade php-enchant-debuginfoUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-pdoUpgrade php-embeddedUpgrade php-dbgUpgrade php-pecl-xdebug-debugsourceUpgrade phpUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-ldapUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlUpgrade php-develUpgrade php-pecl-zipUpgrade php-intlUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade apcu-panelUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-recodeUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-debugsourceUpgrade php-odbc | Apr 29, 2020 | Aug 9, 2019 |
| Rocky_linux | — | Upgrade php-pdo-debuginfoUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-develUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-develUpgrade php-recodeUpgrade php-dbgUpgrade libzip-debugsourceUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade php-intlUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-dbaUpgrade php-soapUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebugUpgrade php-enchant-debuginfoUpgrade php-gdUpgrade phpUpgrade php-pecl-apcu-debugsourceUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-ldapUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-recode-debuginfoUpgrade php-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-mbstringUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-json-debuginfoUpgrade php-odbcUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade libzip-tools | Mar 12, 2024 | Aug 9, 2019 |
| Suse | — | Upgrade php7-shmopUpgrade php7-soapUpgrade php5-mbstringUpgrade php53-gettextUpgrade php5-xmlreaderUpgrade php53-zipUpgrade php53-tokenizerUpgrade php5-calendarUpgrade php7-domUpgrade php53-wddxUpgrade php7-sqliteUpgrade php53-gmpUpgrade php53-snmpUpgrade php7-develUpgrade php53-xmlwriterUpgrade php72-pcntlUpgrade php7-ctypeUpgrade php72-exifUpgrade php72-pgsqlUpgrade php7-opensslUpgrade php5-shmopUpgrade php72-bz2Upgrade php5-soapUpgrade php5-jsonUpgrade php72-gdUpgrade php7-embedUpgrade php5-bcmathUpgrade php5-fpmUpgrade php5-ldapUpgrade php5-fileinfoUpgrade php5-snmpUpgrade php5-pharUpgrade php5-sysvsemUpgrade php72-opensslUpgrade php53-mcryptUpgrade php72-sysvshmUpgrade php5-xslUpgrade php72-pdoUpgrade php5-domUpgrade php5-xmlrpcUpgrade php72-mysqlUpgrade php5-exifUpgrade php72-iconvUpgrade php5-pdoUpgrade php7-zlibUpgrade php7-sysvshmUpgrade php53-sysvsemUpgrade php7-xmlrpcUpgrade php72-domUpgrade php5-iconvUpgrade php5-pearUpgrade apache2-mod_php7Upgrade apache2-mod_php72Upgrade php72-mbstringUpgrade php72-wddxUpgrade php7-sysvmsgUpgrade php5Upgrade php72-intlUpgrade php72-fpmUpgrade php5-bz2Upgrade php53-pcntlUpgrade php7-pcntlUpgrade php72-pharUpgrade php7-pharUpgrade php7-mbstringUpgrade php72-xslUpgrade php7-calendarUpgrade php5-sysvmsgUpgrade php5-socketsUpgrade php5-sysvshmUpgrade php72-xmlwriterUpgrade php53-calendarUpgrade php53-sysvshmUpgrade php53-soapUpgrade php7-exifUpgrade php5-imapUpgrade php53-jsonUpgrade php5-pspellUpgrade php72-curlUpgrade php7-imapUpgrade php5-odbcUpgrade php5-ctypeUpgrade php5-sqliteUpgrade php5-intlUpgrade php7-fastcgiUpgrade php53-gdUpgrade php7-jsonUpgrade php72-tokenizerUpgrade php72-sqliteUpgrade php72-zipUpgrade php53-ctypeUpgrade php53-shmopUpgrade php7-xslUpgrade php72-ftpUpgrade php53Upgrade php72-pear-archive_tarUpgrade php7-dbaUpgrade php5-suhosinUpgrade php5-curlUpgrade php53-fileinfoUpgrade php53-pdoUpgrade php72-pearUpgrade php7-bcmathUpgrade apache2-mod_php53Upgrade php5-fastcgiUpgrade php7-mcryptUpgrade php5-opensslUpgrade php5-gdUpgrade php7-gdUpgrade php72-gettextUpgrade php72-pspellUpgrade php53-domUpgrade php5-tokenizerUpgrade php53-bz2Upgrade php7-sysvsemUpgrade php5-opcacheUpgrade php53-xmlreaderUpgrade php5-pgsqlUpgrade php53-dbaUpgrade php7-pearUpgrade php7-wddxUpgrade php72-xmlreaderUpgrade php53-pearUpgrade php72-readlineUpgrade php7-sodiumUpgrade php72-odbcUpgrade php7-xmlwriterUpgrade php7-snmpUpgrade php5-zlibUpgrade php7-zipUpgrade php7-opcacheUpgrade php53-mysqlUpgrade php5-enchantUpgrade php5-dbaUpgrade apache2-mod_php5Upgrade php7-enchantUpgrade php7-xmlreaderUpgrade php72Upgrade php7-gmpUpgrade php72-ctypeUpgrade php53-curlUpgrade php5-pcntlUpgrade php72-enchantUpgrade php72-fastcgiUpgrade php72-shmopUpgrade php53-pspellUpgrade php53-intlUpgrade php5-gettextUpgrade php7-tidyUpgrade php7-posixUpgrade php5-mcryptUpgrade php5-gmpUpgrade php7-pdoUpgrade php72-bcmathUpgrade php7-odbcUpgrade php7-gettextUpgrade php72-soapUpgrade php53-ldapUpgrade php72-snmpUpgrade php72-opcacheUpgrade php53-bcmathUpgrade php5-zipUpgrade php72-socketsUpgrade php72-ldapUpgrade php7-mysqlUpgrade php7Upgrade php72-xmlrpcUpgrade php7-pspellUpgrade php53-exifUpgrade php53-odbcUpgrade php7-ftpUpgrade php72-imapUpgrade php5-mysqlUpgrade php53-fastcgiUpgrade php72-tidyUpgrade php72-sysvsemUpgrade php72-fileinfoUpgrade php5-wddxUpgrade php5-xmlwriterUpgrade php7-curlUpgrade php7-firebirdUpgrade php5-posixUpgrade php53-opensslUpgrade php7-socketsUpgrade php5-ftpUpgrade php72-sysvmsgUpgrade php7-pgsqlUpgrade php72-develUpgrade php7-intlUpgrade php53-ftpUpgrade php5-develUpgrade php7-tokenizerUpgrade php53-suhosinUpgrade php72-zlibUpgrade php53-xmlrpcUpgrade php72-posixUpgrade php7-iconvUpgrade php53-pgsqlUpgrade php72-calendarUpgrade php53-mbstringUpgrade php53-iconv | Aug 29, 2019 | Aug 9, 2019 |
| Ubuntu | — | Upgrade php7.2-xmlrpcUpgrade libapache2-mod-php7.0Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2-cgiUpgrade php5-xmlrpcUpgrade php7.2-cliUpgrade php7.2-fpmUpgrade php7.0-xmlrpcUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php5-fpmUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5Upgrade php5-cgi | Aug 14, 2019 | Aug 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub