The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade php-develUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-xmlUpgrade php-mbstringUpgrade php-pearUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-opcacheUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-gdUpgrade php-gmpUpgrade php-embeddedUpgrade php-cliUpgrade php-ldapUpgrade php-odbcUpgrade libzip-develUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-intlUpgrade phpUpgrade php-enchantUpgrade php-snmpUpgrade php-recodeUpgrade libzipUpgrade php-dbgUpgrade php-soap | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php73Upgrade php72 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-pecl-zip-debugsourceUpgrade php-processUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-embeddedUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-enchant-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcuUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-pecl-zip-debuginfoUpgrade php-dbaUpgrade php-gdUpgrade php-bcmathUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-pecl-rrd-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pecl-zipUpgrade libzipUpgrade php-opcacheUpgrade libzip-debugsourceUpgrade php-gd-debuginfoUpgrade php-cliUpgrade php-mysqlndUpgrade php-debugsourceUpgrade phpUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-recodeUpgrade php-pecl-apcu-debugsourceUpgrade php-snmpUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade apcu-panelUpgrade php-dbgUpgrade libzip-toolsUpgrade php-pdoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebugUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-fpmUpgrade php-debuginfoUpgrade php-pearUpgrade php-soapUpgrade php-pgsqlUpgrade php-odbc-debuginfoUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-pecl-rrd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-mysqlUpgrade php-xmlrpcUpgrade php-commonUpgrade php-soapUpgrade php-gdUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-processUpgrade phpUpgrade php-recode | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-cliUpgrade phpUpgrade php-commonUpgrade php-processUpgrade php-recodeUpgrade php-xmlUpgrade php-pdoUpgrade php-pgsqlUpgrade php-soapUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-gdUpgrade php-odbcUpgrade php-ldap | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlUpgrade phpUpgrade php-cliUpgrade php-recodeUpgrade php-processUpgrade php-gdUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-soapUpgrade php-commonUpgrade php-odbcUpgrade php-fpm | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-gmpUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-gdUpgrade php-pearUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-recodeUpgrade php-processUpgrade php-soapUpgrade php-dbaUpgrade php-embeddedUpgrade php-develUpgrade php-commonUpgrade php-bcmathUpgrade php-odbcUpgrade php-cliUpgrade php-intlUpgrade php-snmpUpgrade php-pgsqlUpgrade php-pdoUpgrade libzip-develUpgrade php-ldapUpgrade php-dbgUpgrade php-fpmUpgrade php-xmlUpgrade phpUpgrade apcu-panelUpgrade php-pecl-apcu | Sep 10, 2020 | Nov 7, 2019 |
| Php | — | Upgrade to PHP version 7.3.13Upgrade to PHP version 7.2.26Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-ldap-debuginfoUpgrade php-enchant-debuginfoNo solution existsUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-odbcUpgrade php-commonUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dbgUpgrade php-pecl-zip-debugsourceUpgrade php-pdoUpgrade php-pecl-apcuUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-jsonUpgrade php-dbaUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mbstringUpgrade php-json-debuginfoUpgrade php-fpmUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade php-enchantUpgrade php-recodeUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-cliUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-xmlrpcUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade libzipUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-ldapUpgrade php-pearUpgrade php-gd-debuginfoUpgrade php-dbg-debuginfoUpgrade phpUpgrade php-intlUpgrade php-processUpgrade libzip-develUpgrade php-pecl-rrd-debugsourceUpgrade php-soap-debuginfoUpgrade php-bcmath | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-pecl-xdebug-debugsourceUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-apcuUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-xmlUpgrade php-dba-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade php-snmp-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-mbstring-debuginfoUpgrade php-dbgUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade php-recode-debuginfoUpgrade php-xml-debuginfoUpgrade php-gmpUpgrade php-dbaUpgrade php-snmpUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-develUpgrade phpUpgrade php-pecl-rrd-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-soap-debuginfoUpgrade php-commonUpgrade php-pdoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-process-debuginfoUpgrade php-ldapUpgrade php-pecl-rrdUpgrade php-pdo-debuginfoUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade php-enchantUpgrade php-pecl-xdebugUpgrade php-gmp-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfo | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php7Upgrade php72-ctypeUpgrade php53-mysqlUpgrade php5-posixUpgrade php53-suhosinUpgrade php53-pspellUpgrade php72-opcacheUpgrade php7-sysvsemUpgrade php5-mcryptUpgrade php5-mysqlUpgrade php7-sqliteUpgrade php7-gmpUpgrade php72-dbaUpgrade php53-opensslUpgrade php5-calendarUpgrade php7-curlUpgrade php53-gmpUpgrade php72-fastcgiUpgrade php7-posixUpgrade php53-bcmathUpgrade php72-bcmathUpgrade php7-wddxUpgrade php53-tokenizerUpgrade php53-iconvUpgrade php53-sysvshmUpgrade php7-opcacheUpgrade php72-jsonUpgrade php53-xslUpgrade php53-wddxUpgrade php7-socketsUpgrade php72-sysvmsgUpgrade php5-gmpUpgrade php7-gdUpgrade php53-dbaUpgrade php72-posixUpgrade php72-calendarUpgrade php7-mysqlUpgrade php53-bz2Upgrade php53-fastcgiUpgrade php72-xmlrpcUpgrade php72-imapUpgrade php72-ldapUpgrade php7-xmlreaderUpgrade php53-ftpUpgrade php7-pdoUpgrade php72-bz2Upgrade php5-pgsqlUpgrade php53-ldapUpgrade php72-shmopUpgrade php7-snmpUpgrade php53-zipUpgrade php7-ctypeUpgrade php72-snmpUpgrade php7-enchantUpgrade php5-enchantUpgrade php53-domUpgrade php7-testUpgrade php7-firebirdUpgrade php5-ftpUpgrade php7-sodiumUpgrade php5-wddxUpgrade php72-xmlreaderUpgrade php7-gettextUpgrade php7-xmlwriterUpgrade php72-fileinfoUpgrade php7-soapUpgrade php72-tokenizerUpgrade php72-sysvsemUpgrade php7-intlUpgrade php72-soapUpgrade php72-socketsUpgrade php5-develUpgrade php7-fastcgiUpgrade php53-xmlrpcUpgrade php53-pgsqlUpgrade php7-calendarUpgrade php5-pcntlUpgrade php7-pspellUpgrade php5-opcacheUpgrade php7-xslUpgrade php5-dbaUpgrade php5-tokenizerUpgrade php7-domUpgrade php5-odbcUpgrade php5-soapUpgrade php53-exifUpgrade apache2-mod_php5Upgrade php53-pearUpgrade php72-odbcUpgrade php7-iconvUpgrade php7-imapUpgrade php53-xmlreaderUpgrade php7-odbcUpgrade php72-sodiumUpgrade php7-pearUpgrade php7-pgsqlUpgrade php5Upgrade php5-xmlwriterUpgrade php7-zipUpgrade php5-zlibUpgrade php72-develUpgrade php72-domUpgrade php53-curlUpgrade php72-enchantUpgrade php72-sysvshmUpgrade php53-gettextUpgrade php53-intlUpgrade php7-ftpUpgrade php5-exifUpgrade php5-zipUpgrade php5-pdoUpgrade php53-sysvsemUpgrade php7-jsonUpgrade php7-tidyUpgrade php5-intlUpgrade php7-pcntlUpgrade php7-bz2Upgrade php5-sqliteUpgrade php5-pharUpgrade php5-imapUpgrade php72-zlibUpgrade php5-xmlreaderUpgrade php5-sysvshmUpgrade php72Upgrade php72-xslUpgrade php5-ldapUpgrade php5-suhosinUpgrade php7-xmlrpcUpgrade php72-wddxUpgrade php5-bcmathUpgrade php5-jsonUpgrade php72-mysqlUpgrade php53-snmpUpgrade php53-pdoUpgrade php72-gettextUpgrade php5-gdUpgrade php5-curlUpgrade php72-mbstringUpgrade php53-pcntlUpgrade php72-ftpUpgrade php53-fileinfoUpgrade php7-zlibUpgrade php53-odbcUpgrade php72-intlUpgrade php53-mbstringUpgrade php53-soapUpgrade php53-gdUpgrade apache2-mod_php53Upgrade php7-bcmathUpgrade php72-exifUpgrade php53-mcryptUpgrade php5-domUpgrade php5-opensslUpgrade php7-ldapUpgrade php7-mbstringUpgrade php72-gdUpgrade php7-exifUpgrade php5-sysvsemUpgrade php5-pspellUpgrade php53-xmlwriterUpgrade apache2-mod_php7Upgrade php72-iconvUpgrade php7-shmopUpgrade php72-pgsqlUpgrade php5-pearUpgrade php72-pear-archive_tarUpgrade php7-fileinfoUpgrade php72-zipUpgrade php5-mbstringUpgrade php53-ctypeUpgrade php7-sysvmsgUpgrade php5-fastcgiUpgrade php7-sysvshmUpgrade php72-pcntlUpgrade php7-develUpgrade php53Upgrade php5-xmlrpcUpgrade php53-sysvmsgUpgrade php7-pharUpgrade php72-xmlwriterUpgrade php7-readlineUpgrade php72-pspellUpgrade php72-pharUpgrade php72-gmpUpgrade php7-dbaUpgrade php7-opensslUpgrade php72-tidyUpgrade apache2-mod_php72Upgrade php5-bz2Upgrade php53-zlibUpgrade php72-readlineUpgrade php7-mcryptUpgrade php72-fpmUpgrade php72-sqliteUpgrade php5-gettextUpgrade php5-snmpUpgrade php5-fpmUpgrade php72-curlUpgrade php5-iconvUpgrade php5-xslUpgrade php5-ctypeUpgrade php72-opensslUpgrade php53-calendarUpgrade php7-embedUpgrade php72-pdoUpgrade php5-shmopUpgrade php53-jsonUpgrade php72-pearUpgrade php7-tokenizerUpgrade php5-fileinfoUpgrade php53-shmopUpgrade php7-pear-archive_tarUpgrade php7-fpmUpgrade php5-sysvmsgUpgrade php5-sockets | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.2Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-cliUpgrade php7.2-bcmathUpgrade php7.2-cgiUpgrade php5-xmlrpcUpgrade php7.0-bcmathUpgrade php7.3-bcmathUpgrade php7.3-cliUpgrade php7.2-xmlrpcUpgrade php5-fpmUpgrade php7.2-fpmUpgrade php7.0-xmlrpcUpgrade php5-cgiUpgrade php7.0-mbstringUpgrade php7.2-cliUpgrade php5-cli (Ubuntu Pro)Upgrade php5-xmlrpc (Ubuntu Pro)Upgrade php7.3-xmlrpcUpgrade php5-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-mbstringUpgrade php7.3-fpmUpgrade php7.0-cgiUpgrade php7.3-cgiUpgrade php7.2-mbstringUpgrade libapache2-mod-php5Upgrade libapache2-mod-php7.3Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.0-fpm | Jan 16, 2020 | Dec 23, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub