When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade php-pdoUpgrade apcu-panelUpgrade php-dbgUpgrade php-snmpUpgrade phpUpgrade php-opcacheUpgrade php-pecl-zipUpgrade libzipUpgrade php-jsonUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-odbcUpgrade php-ldapUpgrade libzip-develUpgrade php-gmpUpgrade php-gdUpgrade php-mysqlndUpgrade php-enchantUpgrade php-soapUpgrade php-bcmathUpgrade php-intlUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-fpmUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-processUpgrade php-develUpgrade php-mbstringUpgrade php-pearUpgrade php-dbaUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-pgsql | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-pecl-zipUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xmlUpgrade libzip-develUpgrade php-debugsourceUpgrade php-cliUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-gd-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbaUpgrade php-ldapUpgrade php-pgsql-debuginfoUpgrade php-dbgUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade phpUpgrade php-pecl-apcu-debugsourceUpgrade php-recodeUpgrade php-intlUpgrade php-snmpUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-recode-debuginfoUpgrade libzipUpgrade php-pecl-rrd-debugsourceUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-fpmUpgrade php-pdoUpgrade php-soapUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-commonUpgrade php-pearUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-jsonUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-xml-debuginfoUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-pdo-debuginfoUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebugUpgrade php-snmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-opcache-debuginfoUpgrade php-mbstring | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-commonUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pdoUpgrade php-soapUpgrade php-gdUpgrade php-xmlUpgrade php-recodeUpgrade phpUpgrade php-processUpgrade php-cliUpgrade php-ldap | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade phpUpgrade php-xmlUpgrade php-processUpgrade php-cliUpgrade php-recodeUpgrade php-commonUpgrade php-odbcUpgrade php-gdUpgrade php-ldapUpgrade php-pgsqlUpgrade php-soapUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pdo | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-xmlrpcUpgrade php-processUpgrade php-cliUpgrade php-ldapUpgrade php-xmlUpgrade phpUpgrade php-gdUpgrade php-odbcUpgrade php-pdoUpgrade php-fpmUpgrade php-soapUpgrade php-common | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-embeddedUpgrade libzipUpgrade php-dbaUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-pecl-zipUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-enchantUpgrade php-gdUpgrade php-recodeUpgrade php-opcacheUpgrade php-pearUpgrade php-intlUpgrade php-develUpgrade php-dbgUpgrade php-fpmUpgrade php-commonUpgrade php-cliUpgrade php-odbcUpgrade php-pdoUpgrade php-snmpUpgrade php-bcmathUpgrade phpUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-xmlUpgrade libzip-develUpgrade php-pgsqlUpgrade php-ldap | Sep 10, 2020 | Nov 7, 2019 |
| Php | — | Upgrade to PHP version 7.2.26Upgrade to PHP version 7.3.13Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-cliUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pearUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-xmlUpgrade php-intlUpgrade libzip-develUpgrade php-embeddedUpgrade php-gdUpgrade php-bcmath-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-gmp-debuginfoUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-recodeUpgrade php-opcacheUpgrade apcu-panelUpgrade php-recode-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-enchantUpgrade libzipUpgrade php-common-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-fpmNo solution existsUpgrade php-mbstringUpgrade php-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbgUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-intl-debuginfoUpgrade php-fpm-debuginfoUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pgsqlUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-develUpgrade php-pdoUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-process-debuginfo | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-mysqlnd-debuginfoUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbgUpgrade php-cliUpgrade php-opcache-debuginfoUpgrade php-recodeUpgrade php-pecl-rrd-debugsourceUpgrade php-snmpUpgrade php-debuginfoUpgrade libzip-toolsUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-bcmath-debuginfoUpgrade php-xmlUpgrade php-intlUpgrade php-mysqlndUpgrade php-pgsql-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-xml-debuginfoUpgrade php-cli-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade php-pgsqlUpgrade php-embeddedUpgrade php-soapUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade php-jsonUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade php-debugsourceUpgrade php-bcmathUpgrade php-pecl-rrdUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-fpm-debuginfoUpgrade libzip-debugsourceUpgrade phpUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfo | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php72-zlibUpgrade php7-mbstringUpgrade php7-ldapUpgrade php5-sysvshmUpgrade php5-opensslUpgrade php5-intlUpgrade php72-exifUpgrade php5-curlUpgrade php5-socketsUpgrade php7-shmopUpgrade php53-jsonUpgrade php5-domUpgrade php5-shmopUpgrade php5-imapUpgrade php53-xmlwriterUpgrade php7-zlibUpgrade php72-xmlwriterUpgrade php53-sysvmsgUpgrade php5-zipUpgrade php5-gettextUpgrade php5-sysvmsgUpgrade php7-exifUpgrade php5-sysvsemUpgrade php5-gdUpgrade php5-xmlreaderUpgrade php5-xslUpgrade php72-xslUpgrade php7-fpmUpgrade php72-iconvUpgrade php53-fileinfoUpgrade php5-sqliteUpgrade php53-pcntlUpgrade php72-gdUpgrade php72-mbstringUpgrade apache2-mod_php7Upgrade php7-embedUpgrade php7-sysvshmUpgrade php72-pdoUpgrade php53-soapUpgrade php53-calendarUpgrade php5-fileinfoUpgrade php72-pcntlUpgrade php5-ctypeUpgrade php5-snmpUpgrade php72-opensslUpgrade php5-pspellUpgrade php7-xmlrpcUpgrade php72Upgrade php7-bz2Upgrade php5-pearUpgrade php72-pgsqlUpgrade php7-sysvmsgUpgrade php72-pear-archive_tarUpgrade php72-zipUpgrade php5-mbstringUpgrade php7-tokenizerUpgrade php5-xmlrpcUpgrade php7-pcntlUpgrade php53-shmopUpgrade php53-ctypeUpgrade php5-ldapUpgrade php5-fastcgiUpgrade php7-readlineUpgrade php7-pear-archive_tarUpgrade php72-pharUpgrade php72-gmpUpgrade php53-gdUpgrade php5-bz2Upgrade php72-pearUpgrade php72-readlineUpgrade php72-pspellUpgrade php5-pharUpgrade php72-sqliteUpgrade php7-tidyUpgrade php7-fileinfoUpgrade php53-odbcUpgrade apache2-mod_php53Upgrade php5-iconvUpgrade php72-wddxUpgrade php7-ftpUpgrade php72-intlUpgrade php5-exifUpgrade php53Upgrade php7-develUpgrade php53-mcryptUpgrade php72-ftpUpgrade php72-curlUpgrade php7-mcryptUpgrade php53-sysvsemUpgrade php53-mbstringUpgrade php5-pdoUpgrade php72-tidyUpgrade php53-pdoUpgrade php7-jsonUpgrade php5-bcmathUpgrade php72-fpmUpgrade php72-mysqlUpgrade php5-jsonUpgrade php7-pharUpgrade php53-snmpUpgrade php7-opensslUpgrade php5-fpmUpgrade php5-suhosinUpgrade php53-zlibUpgrade php72-gettextUpgrade php7-bcmathUpgrade apache2-mod_php72Upgrade php7-dbaUpgrade php72-snmpUpgrade php53-zipUpgrade php72-shmopUpgrade php72-bz2Upgrade php7-testUpgrade php7-pgsqlUpgrade php5-pgsqlUpgrade php7-intlUpgrade php7-pdoUpgrade php7-posixUpgrade php72-xmlreaderUpgrade php53-bz2Upgrade php72-xmlrpcUpgrade php5-tokenizerUpgrade php53-tokenizerUpgrade php53-iconvUpgrade php7-sysvsemUpgrade php53-curlUpgrade php72-opcacheUpgrade php72-fastcgiUpgrade php7-ctypeUpgrade php7-fastcgiUpgrade php53-ldapUpgrade php5-develUpgrade php7-snmpUpgrade php72-odbcUpgrade php53-exifUpgrade php53-xmlrpcUpgrade php5-pcntlUpgrade php7-firebirdUpgrade php53-pgsqlUpgrade php7-xslUpgrade php7-enchantUpgrade php72-sodiumUpgrade php53-ftpUpgrade php72-fileinfoUpgrade php7-sodiumUpgrade php5-soapUpgrade php5-wddxUpgrade php7-xmlwriterUpgrade apache2-mod_php5Upgrade php72-sysvmsgUpgrade php72-jsonUpgrade php5-odbcUpgrade php72-socketsUpgrade php53-wddxUpgrade php72-dbaUpgrade php7Upgrade php7-xmlreaderUpgrade php7-imapUpgrade php7-pspellUpgrade php5-mysqlUpgrade php7-gmpUpgrade php53-opensslUpgrade php7-sqliteUpgrade php53-suhosinUpgrade php5-calendarUpgrade php5-posixUpgrade php7-gdUpgrade php72-ctypeUpgrade php72-sysvsemUpgrade php72-posixUpgrade php72-tokenizerUpgrade php7-gettextUpgrade php53-domUpgrade php5-opcacheUpgrade php72-sysvshmUpgrade php7-soapUpgrade php72-imapUpgrade php72-develUpgrade php5-zlibUpgrade php72-soapUpgrade php5-enchantUpgrade php5-dbaUpgrade php53-mysqlUpgrade php53-xslUpgrade php53-gmpUpgrade php72-enchantUpgrade php7-calendarUpgrade php72-ldapUpgrade php72-bcmathUpgrade php72-calendarUpgrade php7-mysqlUpgrade php7-zipUpgrade php53-intlUpgrade php53-xmlreaderUpgrade php53-gettextUpgrade php7-pearUpgrade php53-pearUpgrade php5-ftpUpgrade php5-mcryptUpgrade php53-pspellUpgrade php5Upgrade php5-xmlwriterUpgrade php7-wddxUpgrade php7-iconvUpgrade php53-sysvshmUpgrade php53-bcmathUpgrade php7-domUpgrade php7-socketsUpgrade php7-curlUpgrade php72-domUpgrade php53-fastcgiUpgrade php7-odbcUpgrade php5-gmpUpgrade php53-dbaUpgrade php7-opcache | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2Upgrade php7.0-xmlrpcUpgrade php7.3-bcmathUpgrade php5-xmlrpcUpgrade php5-cgi (Ubuntu Pro)Upgrade php7.2-bcmathUpgrade php7.3-cliUpgrade php7.0-bcmathUpgrade php7.2-fpmUpgrade php5-fpmUpgrade php7.2-cgiUpgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php7.2-xmlrpcUpgrade php5-cgiUpgrade php7.3-fpmUpgrade php7.3-mbstringUpgrade php7.0-fpmUpgrade php7.3-cgiUpgrade php7.2-cliUpgrade php5-fpm (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.0-cgiUpgrade php5-cliUpgrade php7.0-mbstringUpgrade php7.3-xmlrpcUpgrade libapache2-mod-php5Upgrade php7.2-mbstringUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade libapache2-mod-php7.3 | Jan 16, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub