When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mysqlndUpgrade apcu-panelUpgrade php-dbgUpgrade php-odbcUpgrade libzip-toolsUpgrade php-recodeUpgrade php-xmlUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-intlUpgrade php-mbstringUpgrade php-snmpUpgrade php-commonUpgrade php-cliUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-processUpgrade phpUpgrade php-pdoUpgrade libzipUpgrade php-develUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-bcmathUpgrade php-gmpUpgrade php-soapUpgrade php-jsonUpgrade php-fpmUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-gdUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-embeddedUpgrade php-pecl-apcu-devel | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-soapUpgrade apcu-panelUpgrade php-gmpUpgrade php-mbstring-debuginfoUpgrade php-pgsqlUpgrade php-odbcUpgrade php-bcmathUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debugsourceUpgrade php-opcache-debuginfoUpgrade php-intlUpgrade libzip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade libzip-toolsUpgrade php-gdUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-dbgUpgrade libzipUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade phpUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade php-recodeUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade php-mbstringUpgrade php-snmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-debugsourceUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-pecl-apcu-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-common-debuginfoUpgrade php-processUpgrade php-develUpgrade php-intl-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-cliUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-recodeUpgrade php-xmlUpgrade phpUpgrade php-mysqlUpgrade php-soapUpgrade php-odbcUpgrade php-pdoUpgrade php-gdUpgrade php-commonUpgrade php-processUpgrade php-pgsql | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-mysqlUpgrade php-ldapUpgrade php-odbcUpgrade php-pgsqlUpgrade php-commonUpgrade php-xmlUpgrade php-soapUpgrade php-processUpgrade phpUpgrade php-recodeUpgrade php-pdoUpgrade php-gdUpgrade php-cliUpgrade php-xmlrpc | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-recodeUpgrade php-commonUpgrade php-ldapUpgrade php-cliUpgrade php-mysqlUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-gdUpgrade php-odbcUpgrade php-processUpgrade phpUpgrade php-pgsqlUpgrade php-soap | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-processUpgrade php-commonUpgrade php-cliUpgrade php-recodeUpgrade phpUpgrade php-soapUpgrade php-fpmUpgrade php-gdUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-xml | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-gdUpgrade php-xmlUpgrade php-dbaUpgrade php-mbstringUpgrade php-soapUpgrade php-pearUpgrade php-processUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-develUpgrade php-pgsqlUpgrade php-cliUpgrade php-dbgUpgrade php-embeddedUpgrade php-intlUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-pecl-apcu-develUpgrade libzipUpgrade php-mysqlndUpgrade php-gmpUpgrade php-ldapUpgrade php-odbcUpgrade apcu-panelUpgrade php-jsonUpgrade php-bcmathUpgrade php-fpmUpgrade libzip-develUpgrade php-commonUpgrade php-pecl-zipUpgrade phpUpgrade php-snmpUpgrade php-opcache | Sep 10, 2020 | Dec 22, 2019 |
| Php | — | Upgrade to PHP version 7.3.13Upgrade to PHP version 7.2.26Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-gdUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-soapUpgrade php-recodeUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpm-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-develUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-intlUpgrade php-debugsourceUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade libzip-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade php-jsonUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zipUpgrade php-cliUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade php-xml-debuginfoUpgrade php-opcacheUpgrade php-bcmathUpgrade libzipUpgrade php-enchantUpgrade php-dbgUpgrade apcu-panelUpgrade php-gd-debuginfoUpgrade php-mbstring-debuginfoNo solution existsUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldapUpgrade php-pecl-rrd-debugsourceUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-pdoUpgrade php-json-debuginfoUpgrade php-pear | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-gd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-bcmathUpgrade libzipUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-gmpUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade php-recodeUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-pecl-xdebugUpgrade php-dbg-debuginfoUpgrade php-pecl-zipUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-dbaUpgrade php-mbstring-debuginfoUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-debuginfoUpgrade php-gmp-debuginfoUpgrade php-odbcUpgrade php-intlUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade phpUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-bcmath-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-cli-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade php-opcacheUpgrade php-xml-debuginfoUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-fpm-debuginfo | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php5-posixUpgrade php72-fileinfoUpgrade php7-sodiumUpgrade php5-intlUpgrade php72-iconvUpgrade php72-sysvshmUpgrade php53-pcntlUpgrade php72-domUpgrade php72-calendarUpgrade php7-pear-archive_tarUpgrade php72-gdUpgrade php53-sysvsemUpgrade php5-sqliteUpgrade php7-firebirdUpgrade php72-mbstringUpgrade php7-sysvshmUpgrade php72-develUpgrade php7-fastcgiUpgrade php53-xslUpgrade php53-zlibUpgrade php5-odbcUpgrade php7-zlibUpgrade php7-fileinfoUpgrade php5-gdUpgrade php7-calendarUpgrade php72-bz2Upgrade php5-mysqlUpgrade php72-intlUpgrade php5-zlibUpgrade php72-pear-archive_tarUpgrade php72-pdoUpgrade php72-tokenizerUpgrade php53-soapUpgrade php5-socketsUpgrade php5-iconvUpgrade php7-imapUpgrade php5-fastcgiUpgrade apache2-mod_php72Upgrade apache2-mod_php53Upgrade php5-fpmUpgrade php5-snmpUpgrade php7-readlineUpgrade php5-pgsqlUpgrade php7-pspellUpgrade php5-exifUpgrade php7-mcryptUpgrade php72-mysqlUpgrade php53-calendarUpgrade php53-intlUpgrade php5-enchantUpgrade php72-dbaUpgrade php53-mcryptUpgrade php5-shmopUpgrade php5-opensslUpgrade php7-xslUpgrade php5-pspellUpgrade php72-xslUpgrade php72-gmpUpgrade php7-opensslUpgrade php72-ldapUpgrade php5Upgrade php7-pcntlUpgrade php53-sysvshmUpgrade php72-wddxUpgrade php7-ldapUpgrade php53-fileinfoUpgrade php7-xmlrpcUpgrade php5-sysvmsgUpgrade php5-tokenizerUpgrade php72-opensslUpgrade php7-jsonUpgrade php5-ctypeUpgrade php53-xmlrpcUpgrade php5-domUpgrade php5-fileinfoUpgrade php53-snmpUpgrade php7-ctypeUpgrade php5-bz2Upgrade php72-pharUpgrade php5-suhosinUpgrade php7-mbstringUpgrade php7-dbaUpgrade php5-curlUpgrade php5-soapUpgrade php5-bcmathUpgrade php72-fpmUpgrade php5-dbaUpgrade php5-ldapUpgrade php72-sqliteUpgrade php72-pearUpgrade php53-jsonUpgrade php5-xslUpgrade php5-sysvshmUpgrade php5-pearUpgrade php72-jsonUpgrade php53-ctypeUpgrade php53-xmlwriterUpgrade php72-pcntlUpgrade php72-zipUpgrade php72-ftpUpgrade php72-curlUpgrade php53-domUpgrade php53-tokenizerUpgrade php7-testUpgrade php5-pharUpgrade apache2-mod_php7Upgrade php7-gettextUpgrade php7-socketsUpgrade php53-bz2Upgrade php7-iconvUpgrade php7-sysvsemUpgrade php72-exifUpgrade php53-fastcgiUpgrade php7-curlUpgrade php7-tokenizerUpgrade php7-opcacheUpgrade php72-readlineUpgrade php53-gettextUpgrade php53-exifUpgrade php72-gettextUpgrade php7-tidyUpgrade php7-enchantUpgrade php5-sysvsemUpgrade php53-zipUpgrade php5-mbstringUpgrade php53-gdUpgrade php72-bcmathUpgrade php72-sysvmsgUpgrade php7-soapUpgrade php53-iconvUpgrade php72-enchantUpgrade php5-develUpgrade php53-pdoUpgrade php72Upgrade php5-opcacheUpgrade php53-ldapUpgrade php72-sodiumUpgrade php53-ftpUpgrade php5-calendarUpgrade php72-fastcgiUpgrade php72-posixUpgrade php5-imapUpgrade php72-imapUpgrade php53-suhosinUpgrade php53-xmlreaderUpgrade php5-pcntlUpgrade php72-shmopUpgrade php53-sysvmsgUpgrade php72-ctypeUpgrade php7-xmlwriterUpgrade php5-xmlrpcUpgrade php7-shmopUpgrade php72-pspellUpgrade php53Upgrade php72-socketsUpgrade php53-mysqlUpgrade php7-mysqlUpgrade php72-zlibUpgrade php7-xmlreaderUpgrade php7-gmpUpgrade php7-gdUpgrade php53-pgsqlUpgrade php53-curlUpgrade php53-opensslUpgrade php5-xmlreaderUpgrade php5-xmlwriterUpgrade php72-snmpUpgrade php7-sysvmsgUpgrade php53-bcmathUpgrade php72-opcacheUpgrade php53-shmopUpgrade php7-sqliteUpgrade php53-dbaUpgrade php53-pearUpgrade php7-bz2Upgrade php7-develUpgrade php7-intlUpgrade php5-zipUpgrade php5-mcryptUpgrade php5-jsonUpgrade php5-wddxUpgrade php7-bcmathUpgrade php53-gmpUpgrade php7-wddxUpgrade php72-soapUpgrade php7-exifUpgrade php7-embedUpgrade php5-ftpUpgrade php7-domUpgrade php7Upgrade php7-ftpUpgrade php5-gmpUpgrade php7-posixUpgrade php53-odbcUpgrade php7-pgsqlUpgrade php72-pgsqlUpgrade php72-xmlwriterUpgrade php53-wddxUpgrade php72-tidyUpgrade php7-snmpUpgrade php53-pspellUpgrade php7-pearUpgrade php72-sysvsemUpgrade php7-pdoUpgrade php53-mbstringUpgrade apache2-mod_php5Upgrade php5-gettextUpgrade php72-xmlrpcUpgrade php7-fpmUpgrade php7-odbcUpgrade php5-pdoUpgrade php72-xmlreaderUpgrade php72-odbcUpgrade php7-pharUpgrade php7-zip | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php7.3-mbstringUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-xmlrpcUpgrade php7.3-fpmUpgrade php7.0-cgiUpgrade php7.0-bcmathUpgrade php7.3-bcmathUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-xmlrpcUpgrade php5-cli (Ubuntu Pro)Upgrade php7.2-bcmathUpgrade php7.3-cliUpgrade libapache2-mod-php7.2Upgrade php7.2-cgiUpgrade libapache2-mod-php7.3Upgrade php7.2-xmlrpcUpgrade php7.0-fpmUpgrade php7.2-fpmUpgrade libapache2-mod-php7.0Upgrade php5-cliUpgrade php7.0-mbstringUpgrade php5-cgiUpgrade php7.0-cliUpgrade php7.2-mbstringUpgrade php7.3-cgiUpgrade php7.2-cliUpgrade php5-xmlrpcUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpmUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php5 | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub