When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-intlUpgrade php-dbgUpgrade php-bcmathUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-pearUpgrade php-commonUpgrade php-odbcUpgrade phpUpgrade libzip-develUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-cliUpgrade php-ldapUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-develUpgrade php-pdoUpgrade php-snmpUpgrade php-mbstringUpgrade php-soapUpgrade php-opcacheUpgrade php-recodeUpgrade php-pecl-zipUpgrade php-gmpUpgrade libzip-toolsUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-processUpgrade php-xmlrpcUpgrade php-enchantUpgrade libzipUpgrade php-json | May 4, 2022 | Aug 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Aug 9, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Sep 19, 2019 | Aug 9, 2019 |
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest version | Oct 8, 2019 | Oct 7, 2019 |
| Centos_linux | — | Upgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-odbcUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-soapUpgrade php-processUpgrade php-debuginfoUpgrade phpUpgrade php-pgsqlUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade php-intlUpgrade php-ldapUpgrade php-pecl-zip-debuginfoUpgrade php-recodeUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade libzip-toolsUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-cliUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchantUpgrade apcu-panelUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-mysqlnd-debuginfoUpgrade php-pearUpgrade libzip-tools-debuginfoUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-bcmathUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-mbstringUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfo | Apr 29, 2020 | Aug 9, 2019 |
| Debian | — | Upgrade php7.3 | Aug 14, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-soapUpgrade php-pgsqlUpgrade php-commonUpgrade php-ldapUpgrade php-odbcUpgrade phpUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-pdoUpgrade php-gdUpgrade php-process | Dec 4, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-processUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-commonUpgrade php-pgsqlUpgrade php-odbcUpgrade php-cliUpgrade php-ldapUpgrade php-gdUpgrade phpUpgrade php-recode | Sep 25, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-xmlUpgrade php-fpmUpgrade php-commonUpgrade php-ldapUpgrade phpUpgrade php-cliUpgrade php-odbcUpgrade php-gdUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-processUpgrade php-soap | Sep 30, 2019 | Aug 9, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 9, 2019 |
| Oracle_linux | — | Upgrade php-opcacheUpgrade php-recodeUpgrade php-mbstringUpgrade php-dbaUpgrade php-cliUpgrade php-snmpUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade libzip-develUpgrade libzip-toolsUpgrade php-processUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-bcmathUpgrade php-pgsqlUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-fpmUpgrade php-pearUpgrade php-dbgUpgrade libzipUpgrade php-embeddedUpgrade php-gmpUpgrade php-pecl-apcuUpgrade php-jsonUpgrade phpUpgrade php-soap | Sep 10, 2020 | Aug 9, 2019 |
| Php | — | Upgrade to PHP version 7.3.8Upgrade to PHP version 7.1.31Upgrade to PHP version 7.2.21 | Aug 27, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade php-enchant-debuginfoUpgrade php-xml-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-debuginfoUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-pecl-xdebugUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstringNo solution existsUpgrade php-intl-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-soapUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade libzipUpgrade libzip-develUpgrade php-enchantUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-dbaUpgrade php-fpmUpgrade php-gdUpgrade php-snmpUpgrade php-recodeUpgrade php-cliUpgrade php-gmpUpgrade php-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade php-opcacheUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-debugsourceUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-dbg-debuginfoUpgrade php-develUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu | Apr 29, 2020 | Aug 9, 2019 |
| Rocky_linux | — | Upgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-dbg-debuginfoUpgrade php-json-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-commonUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debuginfoUpgrade php-processUpgrade php-snmp-debuginfoUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade libzip-develUpgrade php-embeddedUpgrade php-jsonUpgrade php-recode-debuginfoUpgrade php-mysqlndUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-enchantUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-process-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-pdoUpgrade php-bcmathUpgrade php-soapUpgrade php-intlUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-gmpUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade php-ldapUpgrade php-enchant-debuginfo | Mar 12, 2024 | Aug 9, 2019 |
| Suse | — | Upgrade php72-bcmathUpgrade php7-socketsUpgrade php5-iconvUpgrade php72-sysvsemUpgrade php72-opcacheUpgrade php53-curlUpgrade php53-zlibUpgrade php53-domUpgrade php5-exifUpgrade php72-ctypeUpgrade php7-bz2Upgrade php72-xmlrpcUpgrade php72-pcntlUpgrade php7-shmopUpgrade php7-ldapUpgrade php53-pgsqlUpgrade php7-zlibUpgrade php7-sysvsemUpgrade php7-mysqlUpgrade php72-jsonUpgrade php53-xmlwriterUpgrade php7-readlineUpgrade php7-opcacheUpgrade apache2-mod_php53Upgrade php5-curlUpgrade php5-odbcUpgrade php5-domUpgrade php72-dbaUpgrade php7-sqliteUpgrade php5-tokenizerUpgrade php53-xmlreaderUpgrade php5-ctypeUpgrade php53-zipUpgrade php5-dbaUpgrade php7-calendarUpgrade php72-calendarUpgrade php72-odbcUpgrade php7-posixUpgrade php7-zipUpgrade php72-pear-archive_tarUpgrade php5-zlibUpgrade php5-pgsqlUpgrade php72-enchantUpgrade php72-gettextUpgrade php7-iconvUpgrade php5-mbstringUpgrade php53-wddxUpgrade php5-snmpUpgrade php53-gdUpgrade php72-pspellUpgrade php53-exifUpgrade php5-wddxUpgrade apache2-mod_php5Upgrade php72-iconvUpgrade php7-gettextUpgrade php53-tokenizerUpgrade php5-opcacheUpgrade php53-dbaUpgrade php53-xslUpgrade php7-odbcUpgrade php53-xmlrpcUpgrade php53-snmpUpgrade php72-gmpUpgrade php7-develUpgrade apache2-mod_php72Upgrade php53Upgrade php72-ftpUpgrade php7-pear-archive_tarUpgrade php53-opensslUpgrade php7-pearUpgrade php7-soapUpgrade php72-gdUpgrade php53-intlUpgrade php5-ftpUpgrade php53-pearUpgrade php53-ftpUpgrade php53-pspellUpgrade php53-bz2Upgrade php5-enchantUpgrade php53-iconvUpgrade php72-develUpgrade php53-fastcgiUpgrade php7-pspellUpgrade php7-bcmathUpgrade php53-gettextUpgrade php72-xmlreaderUpgrade php5-xmlwriterUpgrade php72-exifUpgrade php53-pcntlUpgrade php72-tidyUpgrade php53-gmpUpgrade php72-snmpUpgrade php7-pdoUpgrade php72-pdoUpgrade php7-sodiumUpgrade php72-ldapUpgrade php5-jsonUpgrade php72-curlUpgrade php7-sysvshmUpgrade php7-gdUpgrade php72-intlUpgrade php7-fastcgiUpgrade php5-sqliteUpgrade php53-jsonUpgrade php5-fpmUpgrade php53-sysvmsgUpgrade php72-sysvshmUpgrade php5-soapUpgrade php72-soapUpgrade php7-dbaUpgrade php7-pgsqlUpgrade php7-firebirdUpgrade php53-pdoUpgrade php7-exifUpgrade php72-bz2Upgrade php5-suhosinUpgrade php7-domUpgrade php7-xmlwriterUpgrade php72-socketsUpgrade php7Upgrade php7-opensslUpgrade php72-sysvmsgUpgrade php72-mbstringUpgrade php53-odbcUpgrade php7-intlUpgrade php72-opensslUpgrade php53-sysvsemUpgrade php72Upgrade php5-sysvmsgUpgrade php53-ldapUpgrade php5-develUpgrade php72-fileinfoUpgrade php5-bz2Upgrade php7-snmpUpgrade php5Upgrade php5-pdoUpgrade php7-ctypeUpgrade php7-ftpUpgrade php72-tokenizerUpgrade php53-sysvshmUpgrade php5-opensslUpgrade php7-tokenizerUpgrade php7-xmlreaderUpgrade php72-mysqlUpgrade php7-wddxUpgrade apache2-mod_php7Upgrade php5-pearUpgrade php72-xslUpgrade php5-mysqlUpgrade php5-fileinfoUpgrade php7-jsonUpgrade php7-pharUpgrade php5-shmopUpgrade php72-shmopUpgrade php72-readlineUpgrade php7-curlUpgrade php53-bcmathUpgrade php5-fastcgiUpgrade php5-mcryptUpgrade php5-intlUpgrade php5-xslUpgrade php7-xmlrpcUpgrade php7-sysvmsgUpgrade php5-socketsUpgrade php5-gdUpgrade php5-xmlrpcUpgrade php53-fileinfoUpgrade php72-fpmUpgrade php7-enchantUpgrade php7-gmpUpgrade php7-embedUpgrade php72-posixUpgrade php7-mcryptUpgrade php53-suhosinUpgrade php53-mysqlUpgrade php72-domUpgrade php5-imapUpgrade php5-gmpUpgrade php5-posixUpgrade php7-pcntlUpgrade php7-fpmUpgrade php5-xmlreaderUpgrade php72-sqliteUpgrade php7-fileinfoUpgrade php5-pcntlUpgrade php72-xmlwriterUpgrade php53-soapUpgrade php72-imapUpgrade php5-gettextUpgrade php5-pspellUpgrade php72-pharUpgrade php7-mbstringUpgrade php72-zlibUpgrade php53-shmopUpgrade php5-zipUpgrade php7-imapUpgrade php72-pearUpgrade php53-ctypeUpgrade php72-zipUpgrade php5-bcmathUpgrade php72-wddxUpgrade php53-calendarUpgrade php5-sysvshmUpgrade php5-ldapUpgrade php5-sysvsemUpgrade php72-pgsqlUpgrade php7-tidyUpgrade php53-mbstringUpgrade php5-calendarUpgrade php5-pharUpgrade php72-fastcgiUpgrade php53-mcryptUpgrade php7-xsl | Aug 30, 2019 | Aug 9, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cliUpgrade php5-cli (Ubuntu Pro)Upgrade php5-fpmUpgrade php7.2-cliUpgrade php7.2-cgiUpgrade php5-cgiUpgrade php5-cgi (Ubuntu Pro)Upgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.2-xmlrpcUpgrade php7.0-fpmUpgrade php5-xmlrpcUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.0-cliUpgrade php7.0-xmlrpcUpgrade php7.2-fpm | Aug 14, 2019 | Aug 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub