An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mysqlndUpgrade phpUpgrade libzipUpgrade php-dbgUpgrade php-pdoUpgrade php-enchantUpgrade php-bcmathUpgrade php-jsonUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-ldapUpgrade apcu-panelUpgrade php-gmpUpgrade php-pearUpgrade php-opcacheUpgrade php-develUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-recodeUpgrade php-fpmUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-cliUpgrade php-mbstringUpgrade php-xmlUpgrade php-commonUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-snmpUpgrade libzip-toolsUpgrade php-pgsqlUpgrade libzip-develUpgrade php-process | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-dbgUpgrade php-pecl-zip-debugsourceUpgrade php-odbcUpgrade php-jsonUpgrade libzip-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-cliUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-ldapUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade php-recode-debuginfoUpgrade php-xmlrpcUpgrade libzip-tools-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-intlUpgrade php-debuginfoUpgrade php-pdo-debuginfoUpgrade php-processUpgrade libzip-debugsourceUpgrade php-recodeUpgrade php-ldap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-mbstringUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade php-gdUpgrade php-cli-debuginfoUpgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-opcacheUpgrade php-soapUpgrade php-dbaUpgrade php-bcmath-debuginfo | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-develUpgrade php-odbcUpgrade php-pgsqlUpgrade php-xmlUpgrade php-fpmUpgrade php-cliUpgrade php-pearUpgrade php-opcacheUpgrade php-snmpUpgrade libzip-develUpgrade php-mysqlndUpgrade php-dbgUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-bcmathUpgrade php-recodeUpgrade php-xmlrpcUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade libzipUpgrade php-gmpUpgrade php-dbaUpgrade libzip-toolsUpgrade php-processUpgrade php-intlUpgrade php-gdUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-mbstringUpgrade php-jsonUpgrade php-enchant | Jul 22, 2024 | Feb 4, 2019 |
| Php | — | Upgrade to PHP version 7.1.27Upgrade to PHP version 7.3.3Upgrade to PHP version 7.2.16 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-ldapUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade libzipUpgrade php-recodeUpgrade php-xmlUpgrade php-cliUpgrade php-intlUpgrade php-recode-debuginfoUpgrade libzip-develUpgrade php-embeddedUpgrade php-processUpgrade phpUpgrade php-gdUpgrade php-snmpUpgrade php-pecl-apcu-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-bcmathUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-gmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-odbc-debuginfoNo solution existsUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-pecl-zip-debugsourceUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-pgsqlUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-opcache-debuginfoUpgrade php-mbstringUpgrade php-dbgUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-dba-debuginfoUpgrade php-soapUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-pearUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debugsource | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-odbc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-dbaUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-opcacheUpgrade phpUpgrade php-cli-debuginfoUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-soapUpgrade php-recodeUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pdoUpgrade php-process-debuginfoUpgrade php-embedded-debuginfoUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-bcmathUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-commonUpgrade php-xml-debuginfoUpgrade php-recode-debuginfoUpgrade php-json-debuginfoUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade php-cliUpgrade php-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-xmlUpgrade php-mysqlnd-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-develUpgrade php-fpmUpgrade php-snmpUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-pgsqlUpgrade libzip-develUpgrade php-mbstring-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php72-jsonUpgrade php72-readlineUpgrade php5-sysvshmUpgrade php7-zipUpgrade php72-domUpgrade php72-opensslUpgrade php72-socketsUpgrade php7-intlUpgrade php5-suhosinUpgrade php7-tokenizerUpgrade php72-sysvmsgUpgrade php72-imapUpgrade php7-calendarUpgrade php7-curlUpgrade php5Upgrade php53-pgsqlUpgrade php72-pspellUpgrade php72-xslUpgrade php5-mysqlUpgrade php5-zipUpgrade php53-curlUpgrade php7-gdUpgrade php5-fastcgiUpgrade php5-pharUpgrade php53-gmpUpgrade php5-pcntlUpgrade php72-ldapUpgrade php5-dbaUpgrade php5-jsonUpgrade php53-ftpUpgrade php72-soapUpgrade php5-gettextUpgrade php53-suhosinUpgrade php5-fpmUpgrade php53-sqliteUpgrade php7-opcacheUpgrade php7-iconvUpgrade php5-gdUpgrade php7-pcntlUpgrade php5-wddxUpgrade php7-ctypeUpgrade php53-shmopUpgrade php72-pharUpgrade php7-embedUpgrade php7-pgsqlUpgrade php5-develUpgrade php5-xmlwriterUpgrade php72-mysqlUpgrade php5-intlUpgrade php7-snmpUpgrade php72-fastcgiUpgrade php7-wddxUpgrade php53-develUpgrade php53-bz2Upgrade php5-bcmathUpgrade php72-odbcUpgrade php72-posixUpgrade php72-bz2Upgrade php72-dbaUpgrade php7-ftpUpgrade php7-opensslUpgrade apache2-mod_php5Upgrade php72-shmopUpgrade php72-pearUpgrade php72-zipUpgrade php53-mysqlUpgrade php5-pspellUpgrade php7-xmlreaderUpgrade php7-exifUpgrade php7-pspellUpgrade php53-calendarUpgrade php72-fileinfoUpgrade php5-pdoUpgrade php7-enchantUpgrade php7-fileinfoUpgrade php72-opcacheUpgrade php7-pearUpgrade php53-ldapUpgrade php72-tokenizerUpgrade php7-fpmUpgrade php53-bcmathUpgrade php7-bcmathUpgrade php53-domUpgrade php5-posixUpgrade php72-fpmUpgrade php5-enchantUpgrade php53-pearUpgrade php53-dbaUpgrade php7-xmlwriterUpgrade php53-xslUpgrade php5-opensslUpgrade php7-firebirdUpgrade php53-jsonUpgrade php5-fileinfoUpgrade apache2-mod_php72Upgrade php5-calendarUpgrade php5-opcacheUpgrade php72-xmlreaderUpgrade php5-sysvsemUpgrade php7-sysvsemUpgrade php53-mcryptUpgrade php72-pdoUpgrade php7-fastcgiUpgrade php53-wddxUpgrade php72-intlUpgrade php53-fastcgiUpgrade php7-testresultsUpgrade php72-snmpUpgrade php5-mbstringUpgrade php72-calendarUpgrade php7-imapUpgrade php53-tokenizerUpgrade php53-zipUpgrade php5-xmlreaderUpgrade php7-soapUpgrade php5-bz2Upgrade php5-zlibUpgrade php53-imapUpgrade php7-sysvmsgUpgrade php7-gettextUpgrade php53-zlibUpgrade php53-mbstringUpgrade php5-tokenizerUpgrade php5-soapUpgrade php7-domUpgrade php7-sysvshmUpgrade php7-sqliteUpgrade php7-mbstringUpgrade apache2-mod_php53Upgrade php5-snmpUpgrade php72-gdUpgrade php72-develUpgrade php53-xmlreaderUpgrade php53-sysvshmUpgrade php7-zlibUpgrade php53-gettextUpgrade php53-opensslUpgrade php5-ctypeUpgrade php5-curlUpgrade apache2-mod_php7Upgrade php53-exifUpgrade php7-ldapUpgrade php72-pgsqlUpgrade php72-tidyUpgrade php7-readlineUpgrade php7-tidyUpgrade php72-pear-archive_tarUpgrade php7-xmlrpcUpgrade php72-zlibUpgrade php72-gettextUpgrade php5-sysvmsgUpgrade php7-bz2Upgrade php7-mcryptUpgrade php5-sqliteUpgrade php72-sysvshmUpgrade php7-sodiumUpgrade php5-ftpUpgrade php53-pspellUpgrade php53-socketsUpgrade php5-exifUpgrade php53-posixUpgrade php53-intlUpgrade php72-xmlwriterUpgrade php7-jsonUpgrade php5-gmpUpgrade php53-soapUpgrade php5-xmlrpcUpgrade php53-pdoUpgrade php53-fileinfoUpgrade php7-posixUpgrade php53-xmlwriterUpgrade php5-domUpgrade php72-xmlrpcUpgrade php5-iconvUpgrade php53-xmlrpcUpgrade php72-mbstringUpgrade php7-gmpUpgrade php5-mcryptUpgrade php72Upgrade php72-wddxUpgrade php53-iconvUpgrade php72-pcntlUpgrade php7-pear-archive_tarUpgrade php53-pcntlUpgrade php53-tidyUpgrade php53-gdUpgrade php5-socketsUpgrade php5-pgsqlUpgrade php72-sqliteUpgrade php7Upgrade php7-socketsUpgrade php7-pdoUpgrade php72-sysvsemUpgrade php72-ctypeUpgrade php5-pearUpgrade php5-xslUpgrade php5-odbcUpgrade php5-ldapUpgrade php72-gmpUpgrade php72-curlUpgrade php72-bcmathUpgrade php7-develUpgrade php7-pharUpgrade php7-odbcUpgrade php53-snmpUpgrade php53-odbcUpgrade php5-imapUpgrade php53-readlineUpgrade php72-exifUpgrade php72-ftpUpgrade php53-sysvmsgUpgrade php7-mysqlUpgrade php72-enchantUpgrade php7-shmopUpgrade php53-sysvsemUpgrade php7-dbaUpgrade php53Upgrade php72-iconvUpgrade php5-shmopUpgrade php53-ctypeUpgrade php7-xsl | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php7.0-cliUpgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade php7.2-fpmUpgrade php7.0-fpmUpgrade php5-xmlrpcUpgrade libapache2-mod-php7.0Upgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php7.2-cliUpgrade php7.2-cgiUpgrade php5-cgiUpgrade php5-fpm | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub