When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-processUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-soapUpgrade libzipUpgrade php-dbaUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-gmpUpgrade php-gdUpgrade php-mbstringUpgrade php-jsonUpgrade php-mysqlndUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-commonUpgrade php-bcmathUpgrade libzip-develUpgrade php-fpmUpgrade php-dbgUpgrade php-xmlUpgrade php-pearUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade phpUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-intlUpgrade php-pdoUpgrade apcu-panelUpgrade php-cliUpgrade php-ldap | May 4, 2022 | Aug 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Aug 9, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php71 | Sep 19, 2019 | Aug 9, 2019 |
| Apple Osx Apachemodphp | — | Upgrade macOS to the latest versionApply OS X security update 2019-001 MojaveApply OS X security update 2019-006 High Sierra | Oct 8, 2019 | Aug 9, 2019 |
| Centos_linux | — | Upgrade phpUpgrade php-pecl-rrdUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-cliUpgrade php-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-soapUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade apcu-panelUpgrade php-ldapUpgrade php-recodeUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade libzip-develUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-odbcUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-enchantUpgrade php-dba-debuginfoUpgrade php-snmpUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade php-recode-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-dbg-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-pearUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-opcache-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-fpmUpgrade libzip | Apr 29, 2020 | Aug 9, 2019 |
| Debian | — | Upgrade php7.3 | Aug 14, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-mysqlUpgrade php-cliUpgrade php-xmlUpgrade php-processUpgrade php-recodeUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-odbcUpgrade phpUpgrade php-commonUpgrade php-ldapUpgrade php-soapUpgrade php-pgsql | Dec 4, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-gdUpgrade php-recodeUpgrade php-odbcUpgrade php-cliUpgrade php-ldapUpgrade php-mysqlUpgrade php-pdoUpgrade php-processUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-commonUpgrade php-soapUpgrade php-pgsql | Sep 25, 2019 | Aug 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-soapUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-fpmUpgrade php-xmlUpgrade php-recodeUpgrade php-odbcUpgrade phpUpgrade php-ldapUpgrade php-commonUpgrade php-cli | Sep 30, 2019 | Aug 9, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 9, 2019 |
| Oracle_linux | — | Upgrade libzip-develUpgrade php-commonUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-cliUpgrade php-dbaUpgrade apcu-panelUpgrade php-odbcUpgrade libzip-toolsUpgrade php-intlUpgrade php-xmlUpgrade php-mbstringUpgrade php-recodeUpgrade php-pecl-rrdUpgrade php-processUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-fpmUpgrade php-embeddedUpgrade php-develUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-dbgUpgrade php-pearUpgrade php-soapUpgrade php-gdUpgrade phpUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-gmpUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-enchantUpgrade libzip | Sep 10, 2020 | Aug 9, 2019 |
| Php | — | Upgrade to PHP version 7.2.21Upgrade to PHP version 7.3.8Upgrade to PHP version 7.1.31 | Aug 27, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade php-xml-debuginfoUpgrade php-pecl-xdebugUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade libzip-debuginfoUpgrade php-mbstringUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoUpgrade php-commonUpgrade php-pearUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dba-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade php-dbgNo solution existsUpgrade php-opcache-debuginfoUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlUpgrade php-cliUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-rrdUpgrade php-intlUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-gdUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade php-opcacheUpgrade php-soapUpgrade php-pdoUpgrade php-embeddedUpgrade php-dbaUpgrade php-snmpUpgrade php-recodeUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-jsonUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade libzip-develUpgrade php-pecl-zipUpgrade phpUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-gmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-enchant | Apr 29, 2020 | Aug 9, 2019 |
| Rocky_linux | — | Upgrade php-json-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebug-debugsourceUpgrade php-mbstringUpgrade php-pecl-xdebugUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-develUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade php-gmpUpgrade php-opcacheUpgrade phpUpgrade php-snmpUpgrade php-dbgUpgrade libzipUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-xmlUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-soapUpgrade php-intlUpgrade php-process-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdoUpgrade php-bcmathUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gdUpgrade php-cliUpgrade php-gmp-debuginfoUpgrade libzip-devel | Mar 12, 2024 | Aug 9, 2019 |
| Suse | — | Upgrade php72-xslUpgrade php5-xmlrpcUpgrade php7-enchantUpgrade php7-embedUpgrade php5-fileinfoUpgrade php53-fileinfoUpgrade php53-suhosinUpgrade php7-gmpUpgrade php5-gmpUpgrade php7-fpmUpgrade php53-bcmathUpgrade php72-fpmUpgrade php7-sysvmsgUpgrade php7-mcryptUpgrade php53-mysqlUpgrade php7-xmlrpcUpgrade php5-xslUpgrade php5-fastcgiUpgrade php5-gdUpgrade php5-mysqlUpgrade php7-tokenizerUpgrade php72-pdoUpgrade php5-socketsUpgrade php7-exifUpgrade php72-mysqlUpgrade php5-mcryptUpgrade php53-soapUpgrade php5-pharUpgrade php72-ldapUpgrade php5-posixUpgrade php5-intlUpgrade php5-calendarUpgrade php72-opensslUpgrade php72-fileinfoUpgrade php7-xmlwriterUpgrade php5-sysvmsgUpgrade php5-pearUpgrade php5-bz2Upgrade php7-snmpUpgrade php7-ctypeUpgrade php5-pdoUpgrade php72Upgrade php72-tokenizerUpgrade php53-sysvsemUpgrade php5Upgrade php7-gdUpgrade php53-jsonUpgrade php72-mbstringUpgrade php7-curlUpgrade php72-socketsUpgrade php7-ftpUpgrade php7-sysvshmUpgrade php5-develUpgrade php72-sysvmsgUpgrade php5-sqliteUpgrade php5-fpmUpgrade php7-tidyUpgrade php53-calendarUpgrade php72-shmopUpgrade php7-fileinfoUpgrade php7-sodiumUpgrade php53-odbcUpgrade php7-pcntlUpgrade php72-curlUpgrade php53-ldapUpgrade php7Upgrade php72-intlUpgrade php53-mcryptUpgrade php72-bz2Upgrade php7-intlUpgrade php7-dbaUpgrade php7-firebirdUpgrade php7-xslUpgrade php53-sysvshmUpgrade php7-wddxUpgrade php5-soapUpgrade php72-posixUpgrade php72-sqliteUpgrade php7-xmlreaderUpgrade php5-jsonUpgrade apache2-mod_php7Upgrade php5-opensslUpgrade php53-sysvmsgUpgrade php7-pgsqlUpgrade php53-pdoUpgrade php72-soapUpgrade php5-zipUpgrade php72-pharUpgrade php7-mbstringUpgrade php5-sysvshmUpgrade php5-ldapUpgrade php5-shmopUpgrade php5-gettextUpgrade php53-ctypeUpgrade php7-imapUpgrade php5-pcntlUpgrade php7-jsonUpgrade php72-imapUpgrade php72-zipUpgrade php72-sysvshmUpgrade php5-xmlreaderUpgrade php72-zlibUpgrade php5-imapUpgrade php7-opensslUpgrade php72-pearUpgrade php5-pspellUpgrade php53-shmopUpgrade php5-bcmathUpgrade php72-xmlwriterUpgrade php72-pgsqlUpgrade php7-fastcgiUpgrade php53-mbstringUpgrade php72-wddxUpgrade php5-sysvsemUpgrade php7-pharUpgrade php7-domUpgrade php72-fastcgiUpgrade php72-readlineUpgrade php72-domUpgrade php5-suhosinUpgrade php7-socketsUpgrade php53-domUpgrade php72-sysvsemUpgrade php7-pear-archive_tarUpgrade php53-pgsqlUpgrade php72-bcmathUpgrade php53-curlUpgrade php5-iconvUpgrade php53-zlibUpgrade php5-exifUpgrade php72-xmlrpcUpgrade php7-ldapUpgrade php7-bz2Upgrade php53-pearUpgrade php72-snmpUpgrade php72-exifUpgrade php53-gmpUpgrade php72-tidyUpgrade php53-dbaUpgrade php7-mysqlUpgrade php53-xmlwriterUpgrade php7-bcmathUpgrade php5-wddxUpgrade php72-opcacheUpgrade php72-pcntlUpgrade php72-jsonUpgrade php53-ftpUpgrade php5-curlUpgrade php5-enchantUpgrade php72-iconvUpgrade php72-ctypeUpgrade php7-sqliteUpgrade php53-xmlreaderUpgrade php53-bz2Upgrade apache2-mod_php5Upgrade php53-iconvUpgrade php53-fastcgiUpgrade php53-pcntlUpgrade php7-zlibUpgrade php53-intlUpgrade php72-pspellUpgrade php72-enchantUpgrade php53-gdUpgrade php53-wddxUpgrade php5-dbaUpgrade apache2-mod_php53Upgrade php7-readlineUpgrade php5-pgsqlUpgrade php7-iconvUpgrade php72-dbaUpgrade php72-gettextUpgrade php5-ftpUpgrade php53-opensslUpgrade php7-posixUpgrade php72-pear-archive_tarUpgrade php72-develUpgrade php72-odbcUpgrade php7-zipUpgrade php72-gdUpgrade php7-pearUpgrade php72-calendarUpgrade php7-calendarUpgrade php5-domUpgrade php5-zlibUpgrade php5-odbcUpgrade php53-tokenizerUpgrade php5-snmpUpgrade php7-shmopUpgrade php53-xmlrpcUpgrade php7-opcacheUpgrade php5-mbstringUpgrade php53-gettextUpgrade php7-pspellUpgrade php53-pspellUpgrade php5-opcacheUpgrade php7-odbcUpgrade php5-ctypeUpgrade php53-xslUpgrade php5-tokenizerUpgrade php7-gettextUpgrade php53-exifUpgrade php5-xmlwriterUpgrade apache2-mod_php72Upgrade php53-zipUpgrade php72-xmlreaderUpgrade php7-pdoUpgrade php7-soapUpgrade php72-ftpUpgrade php53-snmpUpgrade php72-gmpUpgrade php53Upgrade php7-develUpgrade php7-sysvsem | Aug 30, 2019 | Aug 9, 2019 |
| Ubuntu | — | Upgrade php7.2-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php7.2-xmlrpcUpgrade libapache2-mod-php5Upgrade php5-xmlrpcUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php7.2Upgrade php7.0-cgiUpgrade php7.0-xmlrpcUpgrade php5-cliUpgrade php7.2-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cgiUpgrade php5-fpmUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-cli | Aug 14, 2019 | Aug 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub