When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apcu-panelUpgrade php-intlUpgrade php-pdoUpgrade php-commonUpgrade php-develUpgrade php-pgsqlUpgrade libzip-develUpgrade php-bcmathUpgrade php-cliUpgrade php-ldapUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-xmlUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-snmpUpgrade phpUpgrade php-embeddedUpgrade php-processUpgrade php-dbaUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-enchantUpgrade php-recodeUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-gmpUpgrade libzip-toolsUpgrade php-pecl-zipUpgrade php-opcacheUpgrade libzip | May 4, 2022 | Aug 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Aug 9, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Sep 19, 2019 | Aug 9, 2019 |
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Oct 8, 2019 | Oct 7, 2019 |
| Centos_linux | — | Upgrade php-mysqlndUpgrade php-opcacheUpgrade php-dbaUpgrade php-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-intlUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-snmpUpgrade php-recodeUpgrade libzip-develUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-soapUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-gdUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-cliUpgrade php-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-processUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade apcu-panelUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-xdebug-debuginfoUpgrade php-recode-debuginfoUpgrade php-develUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-commonUpgrade php-opcache-debuginfoUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebugUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpc-debuginfo | Apr 29, 2020 | Aug 9, 2019 |
| Debian | — | Upgrade php7.3 | Aug 14, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade phpUpgrade php-pgsqlUpgrade php-ldapUpgrade php-soapUpgrade php-commonUpgrade php-gdUpgrade php-processUpgrade php-pdoUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-mysqlUpgrade php-cli | Dec 4, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-pdoUpgrade php-mysqlUpgrade php-xmlUpgrade php-pgsqlUpgrade php-processUpgrade php-soapUpgrade php-commonUpgrade php-recodeUpgrade php-ldapUpgrade php-cliUpgrade php-odbcUpgrade php-gdUpgrade php | Sep 25, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-processUpgrade php-soapUpgrade php-gdUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-fpmUpgrade phpUpgrade php-commonUpgrade php-odbcUpgrade php-ldapUpgrade php-recodeUpgrade php-xmlUpgrade php-cli | Sep 30, 2019 | Aug 9, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 9, 2019 |
| Oracle_linux | — | Upgrade php-pearUpgrade php-pdoUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-gdUpgrade php-gmpUpgrade phpUpgrade php-jsonUpgrade php-fpmUpgrade php-ldapUpgrade php-soapUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-dbgUpgrade libzipUpgrade php-develUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade libzip-develUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-processUpgrade php-opcacheUpgrade php-intlUpgrade apcu-panelUpgrade php-cliUpgrade php-snmpUpgrade php-recodeUpgrade php-xmlUpgrade php-commonUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-odbc | Sep 10, 2020 | Aug 9, 2019 |
| Php | — | Upgrade to PHP version 7.3.8Upgrade to PHP version 7.1.31Upgrade to PHP version 7.2.21 | Aug 27, 2019 | Aug 9, 2019 |
| Redhat_linux | — | No solution existsUpgrade php-pecl-zip-debuginfoUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pgsqlUpgrade php-pearUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-mysqlndUpgrade php-fpmUpgrade php-recodeUpgrade php-gdUpgrade libzip-debugsourceUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-gmp-debuginfoUpgrade apcu-panelUpgrade php-soapUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-jsonUpgrade php-xmlUpgrade php-opcacheUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-pecl-xdebug-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-develUpgrade php-cliUpgrade php-dbaUpgrade php-processUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-dbg-debuginfoUpgrade php-ldapUpgrade php-enchant | Apr 29, 2020 | Aug 9, 2019 |
| Rocky_linux | — | Upgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zipUpgrade php-intlUpgrade php-gd-debuginfoUpgrade phpUpgrade php-process-debuginfoUpgrade php-opcacheUpgrade php-debugsourceUpgrade php-cliUpgrade php-embeddedUpgrade libzip-develUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-recodeUpgrade php-gdUpgrade php-gmpUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-recode-debuginfoUpgrade php-soapUpgrade libzipUpgrade libzip-debugsourceUpgrade php-mysqlndUpgrade php-dbaUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-snmpUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-fpm-debuginfoUpgrade php-jsonUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-gmp-debuginfoUpgrade php-bcmathUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-pdoUpgrade libzip-toolsUpgrade php-pecl-zip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-soap-debuginfoUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade php-develUpgrade libzip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-dba-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpc | Mar 12, 2024 | Aug 9, 2019 |
| Suse | — | Upgrade php5-odbcUpgrade php72-exifUpgrade php5-snmpUpgrade php53-zipUpgrade php5-ctypeUpgrade php53-pspellUpgrade php7-pspellUpgrade php53-xmlrpcUpgrade php53-gettextUpgrade php5-mbstringUpgrade php5-opcacheUpgrade php5-tokenizerUpgrade php7-bcmathUpgrade php72-xmlreaderUpgrade php53-xslUpgrade php5-wddxUpgrade php53-exifUpgrade php7-pdoUpgrade php5-domUpgrade php7-pearUpgrade php5-zlibUpgrade php7-posixUpgrade php7-calendarUpgrade php5-curlUpgrade php53-ftpUpgrade php7-soapUpgrade php7-shmopUpgrade apache2-mod_php72Upgrade php72-develUpgrade php53-xmlwriterUpgrade php7-zipUpgrade php72-iconvUpgrade php7-zlibUpgrade php53-xmlreaderUpgrade php72-sysvsemUpgrade php72-pear-archive_tarUpgrade php53-zlibUpgrade php7-develUpgrade php72-ftpUpgrade php72-bcmathUpgrade php5-iconvUpgrade php53-pcntlUpgrade php7-socketsUpgrade php7-opcacheUpgrade php72-pcntlUpgrade php53-bz2Upgrade php72-opcacheUpgrade php5-enchantUpgrade php7-sqliteUpgrade php53-fastcgiUpgrade php72-ctypeUpgrade apache2-mod_php5Upgrade php53-iconvUpgrade php53-domUpgrade php5-xmlwriterUpgrade php7-gettextUpgrade php53-tokenizerUpgrade php72-jsonUpgrade php72-tidyUpgrade php53-gmpUpgrade php72-odbcUpgrade php53-pearUpgrade apache2-mod_php53Upgrade php5-dbaUpgrade php72-dbaUpgrade php53-gdUpgrade php53-wddxUpgrade php7-readlineUpgrade php53-intlUpgrade php53-dbaUpgrade php72-pspellUpgrade php72-gettextUpgrade php72-enchantUpgrade php7-iconvUpgrade php53-curlUpgrade php53-snmpUpgrade php5-pgsqlUpgrade php7-odbcUpgrade php7-bz2Upgrade php53-pgsqlUpgrade php53Upgrade php7-sysvsemUpgrade php72-gmpUpgrade php53-opensslUpgrade php72-xmlrpcUpgrade php72-calendarUpgrade php72-gdUpgrade php7-ldapUpgrade php5-exifUpgrade php7-pear-archive_tarUpgrade php72-snmpUpgrade php5-ftpUpgrade php7-mysqlUpgrade php5-develUpgrade php72Upgrade php7-mcryptUpgrade php53-fileinfoUpgrade php72-opensslUpgrade php72-tokenizerUpgrade php72-xmlwriterUpgrade php5-shmopUpgrade php7-embedUpgrade php72-fpmUpgrade php5-fileinfoUpgrade php7-gmpUpgrade php53-pdoUpgrade php5-socketsUpgrade php7-pgsqlUpgrade php7-exifUpgrade php7-xmlrpcUpgrade php7-sysvmsgUpgrade php72-posixUpgrade php5-gmpUpgrade php7-wddxUpgrade php7-firebirdUpgrade php53-bcmathUpgrade php5-xslUpgrade php7-fpmUpgrade php5-soapUpgrade php53-sysvshmUpgrade php72-mysqlUpgrade php53-mysqlUpgrade php5-xmlrpcUpgrade php5-intlUpgrade php5-mcryptUpgrade php53-jsonUpgrade php7-enchantUpgrade php72-intlUpgrade php53-sysvsemUpgrade php5-calendarUpgrade php5-gdUpgrade php72-readlineUpgrade php5-pearUpgrade php53-mbstringUpgrade php5-sysvmsgUpgrade php72-ldapUpgrade php53-sysvmsgUpgrade apache2-mod_php7Upgrade php5-bz2Upgrade php53-mcryptUpgrade php7-pharUpgrade php7-domUpgrade php5-sysvsemUpgrade php7-tidyUpgrade php5-fpmUpgrade php7-sysvshmUpgrade php7-pcntlUpgrade php72-fastcgiUpgrade php72-curlUpgrade php5-posixUpgrade php72-domUpgrade php5-mysqlUpgrade php72-sysvshmUpgrade php7-sodiumUpgrade php5-imapUpgrade php5-sqliteUpgrade php72-shmopUpgrade php72-pgsqlUpgrade php72-sysvmsgUpgrade php7Upgrade php7-curlUpgrade php7-opensslUpgrade php7-intlUpgrade php72-pdoUpgrade php72-socketsUpgrade php7-xmlwriterUpgrade php53-odbcUpgrade php5-suhosinUpgrade php72-mbstringUpgrade php5-gettextUpgrade php7-snmpUpgrade php53-suhosinUpgrade php72-xslUpgrade php72-sqliteUpgrade php72-soapUpgrade php5-pharUpgrade php7-xmlreaderUpgrade php5-pspellUpgrade php5-opensslUpgrade php5-jsonUpgrade php5-fastcgiUpgrade php7-xslUpgrade php7-dbaUpgrade php5-zipUpgrade php7-tokenizerUpgrade php7-fileinfoUpgrade php72-bz2Upgrade php7-fastcgiUpgrade php7-gdUpgrade php72-pearUpgrade php72-pharUpgrade php5-ldapUpgrade php53-soapUpgrade php53-shmopUpgrade php72-imapUpgrade php5-bcmathUpgrade php5-pcntlUpgrade php72-zipUpgrade php7-mbstringUpgrade php72-zlibUpgrade php53-ctypeUpgrade php72-wddxUpgrade php7-imapUpgrade php53-calendarUpgrade php5-sysvshmUpgrade php7-jsonUpgrade php7-ctypeUpgrade php5-xmlreaderUpgrade php72-fileinfoUpgrade php5-pdoUpgrade php7-ftpUpgrade php5Upgrade php53-ldap | Aug 30, 2019 | Aug 9, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-fpmUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.0-cliUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.0-xmlrpcUpgrade php5-xmlrpcUpgrade php7.2-xmlrpcUpgrade php7.0-fpmUpgrade php5-fpmUpgrade php7.2-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.2-cliUpgrade php5-cgiUpgrade php5-cli (Ubuntu Pro)Upgrade php5-cli | Aug 14, 2019 | Aug 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub