When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-cliUpgrade phpUpgrade php-enchantUpgrade php-intlUpgrade libzip-develUpgrade php-jsonUpgrade php-ldapUpgrade php-odbcUpgrade apcu-panelUpgrade php-recodeUpgrade php-opcacheUpgrade php-pdoUpgrade php-snmpUpgrade php-bcmathUpgrade php-soapUpgrade php-gmpUpgrade php-embeddedUpgrade php-gdUpgrade php-dbgUpgrade libzipUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-pgsqlUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-develUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-commonUpgrade php-fpmUpgrade php-dbaUpgrade php-pear | May 4, 2022 | Dec 23, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Dec 23, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php73Upgrade php73 | Feb 8, 2020 | Dec 23, 2019 |
| Centos_linux | — | Upgrade php-intl-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcache-debuginfoUpgrade php-soapUpgrade php-pearUpgrade php-odbcUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-dba-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-common-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdoUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-snmpUpgrade php-xmlUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcuUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zipUpgrade php-recode-debuginfoUpgrade libzip-toolsUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-soap-debuginfoUpgrade php-opcacheUpgrade php-intlUpgrade php-dbaUpgrade php-embeddedUpgrade php-json-debuginfoUpgrade libzipUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-debugsourceUpgrade phpUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-recode | Sep 9, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade php7.3 | Jan 2, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-recodeUpgrade php-ldapUpgrade phpUpgrade php-xmlUpgrade php-cliUpgrade php-processUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-commonUpgrade php-gdUpgrade php-soapUpgrade php-pgsqlUpgrade php-odbc | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-recodeUpgrade php-cliUpgrade php-commonUpgrade php-processUpgrade phpUpgrade php-soapUpgrade php-pdoUpgrade php-odbcUpgrade php-gdUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-pgsql | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade php-pdoUpgrade php-soapUpgrade php-commonUpgrade php-fpmUpgrade php-gdUpgrade php-ldapUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-cliUpgrade phpUpgrade php-process | Feb 26, 2020 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.14-11.4.19.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Oracle_linux | — | Upgrade php-soapUpgrade php-jsonUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade libzipUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-processUpgrade php-recodeUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-embeddedUpgrade php-gdUpgrade php-pearUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-develUpgrade php-pdoUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-xmlUpgrade apcu-panelUpgrade phpUpgrade libzip-develUpgrade php-fpmUpgrade php-commonUpgrade php-snmpUpgrade php-bcmathUpgrade php-odbcUpgrade php-cliUpgrade php-intl | Sep 10, 2020 | Nov 7, 2019 |
| Php | — | Upgrade to PHP version 7.2.26Upgrade to PHP version 7.3.13Upgrade to PHP version 7.4.1 | Jan 22, 2020 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade php-process-debuginfoUpgrade php-commonUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbgUpgrade php-soapUpgrade php-debuginfoUpgrade php-fpm-debuginfoUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-json-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gmpUpgrade php-cli-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pgsqlUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-zip-debugsourceUpgrade php-mbstring-debuginfoUpgrade libzip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-pecl-rrd-debuginfoNo solution existsUpgrade php-dba-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-mbstringUpgrade php-recode-debuginfoUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade apcu-panelUpgrade phpUpgrade php-gd-debuginfoUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-ldapUpgrade php-snmpUpgrade php-opcacheUpgrade php-recodeUpgrade php-bcmathUpgrade php-gmp-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade libzipUpgrade php-soap-debuginfoUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-mysqlndUpgrade php-intlUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-xmlUpgrade php-pearUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-gd | Sep 9, 2020 | Dec 23, 2019 |
| Rocky_linux | — | Upgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-pgsql-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade php-commonUpgrade php-snmpUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-mbstring-debuginfoUpgrade php-recodeUpgrade php-pecl-rrd-debugsourceUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade php-cliUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-processUpgrade php-jsonUpgrade php-develUpgrade phpUpgrade php-xml-debuginfoUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade php-gmpUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade php-fpmUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-soapUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldap | Mar 12, 2024 | Dec 23, 2019 |
| Suse | — | Upgrade php7-ctypeUpgrade php53-exifUpgrade php72-bz2Upgrade php7-snmpUpgrade php5-develUpgrade php5-dbaUpgrade php72-odbcUpgrade php53-xmlrpcUpgrade php5-posixUpgrade php7-enchantUpgrade php53-mysqlUpgrade php7-testUpgrade php72-dbaUpgrade php7-sqliteUpgrade php72-shmopUpgrade php72-socketsUpgrade php7-socketsUpgrade php7-pgsqlUpgrade php7-imapUpgrade php5-mysqlUpgrade php7-gmpUpgrade php53-ftpUpgrade php53-ldapUpgrade php5-pcntlUpgrade php53-pgsqlUpgrade php72-snmpUpgrade php7-intlUpgrade php5-ftpUpgrade php53-opensslUpgrade php72-jsonUpgrade php7-firebirdUpgrade php53-zipUpgrade php7-fastcgiUpgrade php7-xslUpgrade php53-suhosinUpgrade php5-enchantUpgrade php53-pspellUpgrade php5-pgsqlUpgrade php7-pdoUpgrade php7-posixUpgrade php72-fastcgiUpgrade php53-pearUpgrade php72-opcacheUpgrade php7-sysvsemUpgrade php53-gmpUpgrade php7Upgrade php7-curlUpgrade php5-calendarUpgrade php72-ctypeUpgrade php53-bcmathUpgrade php7-odbcUpgrade php72-sysvsemUpgrade php72-soapUpgrade php7-mysqlUpgrade php7-opcacheUpgrade php5-mcryptUpgrade php72-domUpgrade php53-iconvUpgrade php5-gmpUpgrade php53-domUpgrade php72-posixUpgrade php72-develUpgrade php5-zlibUpgrade php72-imapUpgrade php72-sysvshmUpgrade php7-soapUpgrade php72-tokenizerUpgrade php53-bz2Upgrade php72-xmlrpcUpgrade php53-xslUpgrade php7-wddxUpgrade php53-dbaUpgrade php7-xmlreaderUpgrade php7-gdUpgrade php5-opcacheUpgrade php5-soapUpgrade php5-wddxUpgrade php5-odbcUpgrade php7-xmlwriterUpgrade php72-xmlreaderUpgrade php72-sodiumUpgrade apache2-mod_php5Upgrade php72-fileinfoUpgrade php7-gettextUpgrade php53-sysvshmUpgrade php72-bcmathUpgrade php7-pearUpgrade php5Upgrade php72-sysvmsgUpgrade php7-domUpgrade php7-sodiumUpgrade php53-fastcgiUpgrade php53-intlUpgrade php72-calendarUpgrade php7-zipUpgrade php7-pspellUpgrade php53-curlUpgrade php53-tokenizerUpgrade php53-xmlreaderUpgrade php5-xmlwriterUpgrade php5-tokenizerUpgrade php7-iconvUpgrade php53-wddxUpgrade php7-calendarUpgrade php72-enchantUpgrade php72-ldapUpgrade php53-gettextUpgrade php5-fileinfoUpgrade php53-fileinfoUpgrade php7-ldapUpgrade php7-sysvmsgUpgrade php5-pearUpgrade apache2-mod_php7Upgrade php53-ctypeUpgrade php72-pear-archive_tarUpgrade php53-soapUpgrade php53-calendarUpgrade php5-xslUpgrade php7-embedUpgrade php5-ctypeUpgrade php72-iconvUpgrade php72-sqliteUpgrade php53-gdUpgrade php72-curlUpgrade php53-mbstringUpgrade php5-bz2Upgrade php53-sysvsemUpgrade php7-tidyUpgrade apache2-mod_php72Upgrade php53-zlibUpgrade php7-mcryptUpgrade php5-exifUpgrade php72-readlineUpgrade php7-zlibUpgrade php72-fpmUpgrade php72-tidyUpgrade php72-mysqlUpgrade php5-pdoUpgrade php53-snmpUpgrade php5-jsonUpgrade php53-pdoUpgrade php5-suhosinUpgrade php72-gettextUpgrade php5-fpmUpgrade php7-jsonUpgrade php7-opensslUpgrade php7-readlineUpgrade php5-pharUpgrade php72-pearUpgrade php5-ldapUpgrade php72-pharUpgrade php72-xmlwriterUpgrade php7-develUpgrade php7-pharUpgrade php7-pear-archive_tarUpgrade php5-fastcgiUpgrade php53-shmopUpgrade php5-imapUpgrade php7-xmlrpcUpgrade php53-sysvmsgUpgrade php7-dbaUpgrade php72-pspellUpgrade php7-sysvshmUpgrade php72-pcntlUpgrade php5-shmopUpgrade php7-fpmUpgrade php72-ftpUpgrade php5-snmpUpgrade apache2-mod_php53Upgrade php72-mbstringUpgrade php7-ftpUpgrade php5-gdUpgrade php7-bcmathUpgrade php5-bcmathUpgrade php5-gettextUpgrade php5-curlUpgrade php72-wddxUpgrade php72-intlUpgrade php53-pcntlUpgrade php5-sysvshmUpgrade php5-domUpgrade php53-jsonUpgrade php72-gdUpgrade php53-mcryptUpgrade php72-zlibUpgrade php5-opensslUpgrade php5-socketsUpgrade php5-intlUpgrade php7-mbstringUpgrade php7-exifUpgrade php5-sysvsemUpgrade php5-xmlreaderUpgrade php5-iconvUpgrade php72-gmpUpgrade php53Upgrade php7-bz2Upgrade php72-xslUpgrade php5-pspellUpgrade php72Upgrade php72-opensslUpgrade php72-pdoUpgrade php72-exifUpgrade php7-pcntlUpgrade php5-xmlrpcUpgrade php53-xmlwriterUpgrade php7-tokenizerUpgrade php5-sysvmsgUpgrade php5-zipUpgrade php5-sqliteUpgrade php53-odbcUpgrade php7-fileinfoUpgrade php5-mbstringUpgrade php7-shmopUpgrade php72-pgsqlUpgrade php72-zip | Jan 21, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade php7.3-xmlrpcUpgrade php7.3-mbstringUpgrade php5-xmlrpc (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php5-cgiUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.2-mbstringUpgrade php7.0-cgiUpgrade php5-cliUpgrade php7.2-cliUpgrade php7.3-fpmUpgrade libapache2-mod-php7.3Upgrade libapache2-mod-php5Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php7.3-cgiUpgrade php7.0-mbstringUpgrade php5-fpmUpgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade libapache2-mod-php7.2Upgrade php7.3-cliUpgrade php7.2-xmlrpcUpgrade php7.2-cgiUpgrade php7.0-xmlrpcUpgrade php7.2-fpmUpgrade php7.2-bcmathUpgrade php5-cgi (Ubuntu Pro)Upgrade php5-xmlrpcUpgrade php7.0-bcmathUpgrade php7.3-bcmath | Jan 16, 2020 | Dec 23, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub