When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-gmpUpgrade php-processUpgrade php-pecl-zipUpgrade php-pearUpgrade php-pdoUpgrade phpUpgrade php-bcmathUpgrade libzipUpgrade php-pecl-apcuUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-soapUpgrade php-embeddedUpgrade php-develUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-gdUpgrade php-ldapUpgrade php-jsonUpgrade php-pgsqlUpgrade php-mysqlndUpgrade libzip-develUpgrade libzip-toolsUpgrade php-odbcUpgrade php-commonUpgrade php-opcacheUpgrade php-xmlUpgrade apcu-panelUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-cliUpgrade php-snmpUpgrade php-mbstringUpgrade php-intlUpgrade php-dbg | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-odbcUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-pecl-zip-debugsourceUpgrade php-dbaUpgrade php-jsonUpgrade php-dbgUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pgsqlUpgrade php-soapUpgrade php-pdo-debuginfoUpgrade php-gmpUpgrade php-odbc-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-intlUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-debuginfoUpgrade libzipUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-snmp-debuginfoUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade phpUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-mbstringUpgrade php-recodeUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debugsourceUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-pearUpgrade php-enchantUpgrade php-xmlUpgrade php-common-debuginfoUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-opcacheUpgrade php-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-processUpgrade php-soapUpgrade php-pdoUpgrade php-commonUpgrade php-gdUpgrade php-mysqlUpgrade php-odbcUpgrade php-pgsqlUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-ldapUpgrade phpUpgrade php-xmlrpc | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-soapUpgrade php-odbcUpgrade php-ldapUpgrade php-commonUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-cliUpgrade phpUpgrade php-xmlUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pdoUpgrade php-recode | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-commonUpgrade php-xmlUpgrade php-mysqlUpgrade php-cliUpgrade php-ldapUpgrade php-recodeUpgrade php-gdUpgrade phpUpgrade php-processUpgrade php-soapUpgrade php-pgsqlUpgrade php-odbc | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-commonUpgrade php-recodeUpgrade php-cliUpgrade phpUpgrade php-processUpgrade php-soapUpgrade php-ldapUpgrade php-gdUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pdoUpgrade php-odbcUpgrade php-xml | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-dbgUpgrade php-cliUpgrade libzipUpgrade php-embeddedUpgrade php-recodeUpgrade php-snmpUpgrade php-commonUpgrade php-fpmUpgrade php-ldapUpgrade phpUpgrade php-develUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade apcu-panelUpgrade php-gmpUpgrade php-intlUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-bcmathUpgrade libzip-develUpgrade php-dbaUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pearUpgrade php-processUpgrade php-soapUpgrade php-mbstringUpgrade php-xml | Sep 10, 2020 | Dec 22, 2019 |
| Php | — | Upgrade to PHP version 7.3.13Upgrade to PHP version 7.2.26Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-soapUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-snmpUpgrade libzip-develUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-recodeUpgrade php-processUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade libzip-debugsourceUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade libzipUpgrade php-mysqlndUpgrade php-fpm-debuginfoUpgrade php-pearUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gd-debuginfoUpgrade phpUpgrade php-recode-debuginfoUpgrade php-gmpUpgrade php-embedded-debuginfoUpgrade php-jsonUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pdoUpgrade php-dbgUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceNo solution existsUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-debugsourceUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-ldapUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-enchantUpgrade php-develUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade libzip-debuginfoUpgrade apcu-panelUpgrade php-dba-debuginfoUpgrade php-xml | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-enchant-debuginfoUpgrade libzipUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-recode-debuginfoUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-recodeUpgrade php-xmlUpgrade php-fpmUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-cliUpgrade php-common-debuginfoUpgrade php-commonUpgrade php-gd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade php-gmpUpgrade php-enchantUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-debugsourceUpgrade php-dbaUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-debuginfoUpgrade php-intlUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-odbcUpgrade php-soapUpgrade php-embedded-debuginfoUpgrade php-pdo-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-pecl-xdebug-debugsourceUpgrade php-cli-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-toolsUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-opcacheUpgrade php-xml-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-json-debuginfoUpgrade php | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php53-pspellUpgrade php7-sysvsemUpgrade php5-xmlwriterUpgrade php7-fpmUpgrade php72-exifUpgrade php72-imapUpgrade php5-jsonUpgrade php5-zipUpgrade php53-ftpUpgrade php5-imapUpgrade php53-fastcgiUpgrade php7-odbcUpgrade apache2-mod_php5Upgrade php53-gettextUpgrade php7-develUpgrade php72-xmlwriterUpgrade php7-snmpUpgrade php53-ldapUpgrade php53-iconvUpgrade php53-odbcUpgrade php72Upgrade php53-gmpUpgrade php7-wddxUpgrade php7-ftpUpgrade php7-posixUpgrade php72-tidyUpgrade php7-pgsqlUpgrade php7-socketsUpgrade php53-dbaUpgrade php5-calendarUpgrade php53-xmlreaderUpgrade php53-suhosinUpgrade php72-opcacheUpgrade php7-xmlwriterUpgrade php72-xmlreaderUpgrade php5-opcacheUpgrade php72-snmpUpgrade php7-gdUpgrade php72-sysvsemUpgrade php7-soapUpgrade php72-readlineUpgrade php5-develUpgrade php5-gettextUpgrade php7-opcacheUpgrade php53-shmopUpgrade php7-gmpUpgrade php72-fastcgiUpgrade php72-sodiumUpgrade php7-pharUpgrade php7-tokenizerUpgrade php5-ftpUpgrade php5-gmpUpgrade php7-bz2Upgrade php7-zipUpgrade php7-embedUpgrade php53-bz2Upgrade php72-enchantUpgrade php53-pdoUpgrade php7-exifUpgrade php53-pearUpgrade php5-pdoUpgrade php72-pspellUpgrade php7-sysvmsgUpgrade php72-xmlrpcUpgrade php5-xmlreaderUpgrade php53-mysqlUpgrade php5-pcntlUpgrade php7-bcmathUpgrade php7-iconvUpgrade php72-socketsUpgrade php7-xmlreaderUpgrade php7-mysqlUpgrade php72-ctypeUpgrade php72-shmopUpgrade php7-shmopUpgrade php53-sysvmsgUpgrade php53Upgrade php5-xmlrpcUpgrade php53-bcmathUpgrade php72-pgsqlUpgrade php7-pdoUpgrade php7-gettextUpgrade php53-curlUpgrade php5-wddxUpgrade php53-wddxUpgrade php7-domUpgrade php7-tidyUpgrade php5-mcryptUpgrade php5-mbstringUpgrade php7-pearUpgrade php72-bcmathUpgrade apache2-mod_php7Upgrade php7-intlUpgrade php72-soapUpgrade php53-exifUpgrade php72-gettextUpgrade php7-enchantUpgrade php5-sysvsemUpgrade php53-pgsqlUpgrade php53-zipUpgrade php53-gdUpgrade php5-pharUpgrade php53-mbstringUpgrade php72-posixUpgrade php53-opensslUpgrade php72-odbcUpgrade php7-testUpgrade php7-sqliteUpgrade php72-sysvmsgUpgrade php7Upgrade php72-zlibUpgrade php7-curlUpgrade php53-xmlrpcUpgrade php5-posixUpgrade php72-xslUpgrade php5-bcmathUpgrade php72-jsonUpgrade php7-jsonUpgrade php72-wddxUpgrade php7-ctypeUpgrade php53-sysvshmUpgrade php5-domUpgrade php7-xmlrpcUpgrade php7-mbstringUpgrade php5-fastcgiUpgrade php53-xslUpgrade php7-opensslUpgrade php5-mysqlUpgrade php72-pdoUpgrade php53-soapUpgrade php72-sqliteUpgrade php53-ctypeUpgrade php72-zipUpgrade php7-xslUpgrade php72-pearUpgrade php53-intlUpgrade php72-bz2Upgrade php7-ldapUpgrade php7-sodiumUpgrade php53-pcntlUpgrade php5-ldapUpgrade php7-pcntlUpgrade php7-fileinfoUpgrade php5-snmpUpgrade php5-exifUpgrade php53-calendarUpgrade apache2-mod_php53Upgrade php5-iconvUpgrade php5-curlUpgrade php72-pharUpgrade php7-readlineUpgrade php7-pspellUpgrade php72-mysqlUpgrade php7-sysvshmUpgrade php7-mcryptUpgrade php72-fileinfoUpgrade php5-socketsUpgrade php7-imapUpgrade php53-mcryptUpgrade php72-intlUpgrade php7-dbaUpgrade php5-fpmUpgrade php53-tokenizerUpgrade php5Upgrade php72-dbaUpgrade php53-snmpUpgrade php5-intlUpgrade php72-fpmUpgrade php72-iconvUpgrade php7-pear-archive_tarUpgrade php72-calendarUpgrade php72-curlUpgrade php5-sqliteUpgrade php72-mbstringUpgrade php7-firebirdUpgrade php7-fastcgiUpgrade php53-jsonUpgrade php53-xmlwriterUpgrade php5-sysvshmUpgrade php5-gdUpgrade php72-gmpUpgrade php72-sysvshmUpgrade php72-pcntlUpgrade php53-sysvsemUpgrade php5-pearUpgrade php72-domUpgrade php5-soapUpgrade php7-zlibUpgrade php5-dbaUpgrade php53-domUpgrade php72-gdUpgrade php72-develUpgrade php53-zlibUpgrade php72-ftpUpgrade php5-xslUpgrade php5-fileinfoUpgrade php5-zlibUpgrade apache2-mod_php72Upgrade php72-pear-archive_tarUpgrade php7-calendarUpgrade php5-shmopUpgrade php72-ldapUpgrade php5-pspellUpgrade php5-odbcUpgrade php5-enchantUpgrade php5-opensslUpgrade php5-pgsqlUpgrade php72-tokenizerUpgrade php5-suhosinUpgrade php5-bz2Upgrade php5-tokenizerUpgrade php5-sysvmsgUpgrade php5-ctypeUpgrade php53-fileinfoUpgrade php72-openssl | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php5Upgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.2-cliUpgrade php7.2-fpmUpgrade php7.2-mbstringUpgrade php7.0-cliUpgrade php5-fpmUpgrade php7.3-cgiUpgrade php5-cliUpgrade php7.0-mbstringUpgrade php5-xmlrpcUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-cgiUpgrade php7.0-xmlrpcUpgrade php7.2-cgiUpgrade php7.0-cgiUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.3-fpmUpgrade php7.3-cliUpgrade php7.3-bcmathUpgrade php7.0-bcmathUpgrade php7.2-xmlrpcUpgrade php7.2-bcmathUpgrade php5-cli (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-mbstringUpgrade libapache2-mod-php7.2Upgrade php7.3-xmlrpcUpgrade libapache2-mod-php7.3 | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub