An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-snmpUpgrade php-dbaUpgrade php-cliUpgrade libzip-develUpgrade php-pgsqlUpgrade libzip-toolsUpgrade php-processUpgrade php-xmlUpgrade php-opcacheUpgrade php-soapUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-enchantUpgrade libzipUpgrade php-pearUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-embeddedUpgrade php-intlUpgrade php-dbgUpgrade phpUpgrade php-jsonUpgrade php-develUpgrade php-fpmUpgrade apcu-panelUpgrade php-recode | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-snmp-debuginfoUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-snmpUpgrade phpUpgrade php-dbg-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intlUpgrade php-mysqlndUpgrade libzip-develUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-soapUpgrade php-dbaUpgrade php-gdUpgrade php-soap-debuginfoUpgrade php-process-debuginfoUpgrade php-opcacheUpgrade php-pdo-debuginfoUpgrade php-processUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-develUpgrade php-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-odbc-debuginfoUpgrade php-embedded-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-enchantUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-common-debuginfoUpgrade php-fpmUpgrade php-xml-debuginfoUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-dbgUpgrade php-xmlUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-pearUpgrade php-cliUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zipUpgrade php-ldapUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-pdo | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade libzip-toolsUpgrade php-recodeUpgrade php-processUpgrade php-gmpUpgrade php-jsonUpgrade phpUpgrade php-intlUpgrade php-pdoUpgrade php-enchantUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-bcmathUpgrade php-soapUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-mbstringUpgrade php-xmlrpcUpgrade libzipUpgrade apcu-panelUpgrade php-cliUpgrade libzip-develUpgrade php-ldapUpgrade php-develUpgrade php-pearUpgrade php-mysqlndUpgrade php-snmpUpgrade php-commonUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-xmlUpgrade php-opcacheUpgrade php-fpmUpgrade php-pgsqlUpgrade php-odbc | Jul 22, 2024 | Feb 4, 2019 |
| Php | — | Upgrade to PHP version 7.1.27Upgrade to PHP version 7.2.16Upgrade to PHP version 7.3.3 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-odbcUpgrade php-commonUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade php-mbstring-debuginfoUpgrade php-soapUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-develUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstringUpgrade php-pdo-debuginfoUpgrade php-process-debuginfoUpgrade libzip-debuginfoUpgrade php-dbaUpgrade php-debuginfoUpgrade php-pdoUpgrade php-fpm-debuginfoUpgrade php-xmlrpcNo solution existsUpgrade php-cli-debuginfoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pearUpgrade php-snmpUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-debugsourceUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-pecl-zip-debuginfoUpgrade php-gdUpgrade php-gd-debuginfoUpgrade apcu-panelUpgrade php-gmp-debuginfoUpgrade libzipUpgrade libzip-develUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade php-cliUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-intlUpgrade php-ldapUpgrade libzip-toolsUpgrade php-dbg-debuginfoUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade php-opcache | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php-embeddedUpgrade php-embedded-debuginfoUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-mbstringUpgrade php-processUpgrade php-xmlrpcUpgrade php-gmp-debuginfoUpgrade libzipUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-pecl-zip-debugsourceUpgrade php-enchantUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade php-recodeUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-soapUpgrade libzip-tools-debuginfoUpgrade php-dbaUpgrade php-bcmathUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-snmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-xml-debuginfoUpgrade php-develUpgrade libzip-toolsUpgrade php-debuginfoUpgrade php-cliUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-bcmath-debuginfoUpgrade php-dba-debuginfoUpgrade php-soap-debuginfoUpgrade php-odbcUpgrade libzip-develUpgrade php-intlUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-json-debuginfoUpgrade php-fpm-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-ldapUpgrade php-common-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php5-dbaUpgrade php5-zipUpgrade php53-ftpUpgrade php7-fastcgiUpgrade php7-pgsqlUpgrade php72-bz2Upgrade php72-domUpgrade php53-gmpUpgrade php5-pharUpgrade php5-sysvshmUpgrade php5-pcntlUpgrade php7-zipUpgrade php5-jsonUpgrade php72-opensslUpgrade php5-mysqlUpgrade php72-socketsUpgrade php7-curlUpgrade php72-sysvmsgUpgrade php72-tokenizerUpgrade php7-opensslUpgrade php5Upgrade php5-fastcgiUpgrade php7-xmlwriterUpgrade php7-ctypeUpgrade php53-mcryptUpgrade php7-enchantUpgrade php5-bcmathUpgrade php72-imapUpgrade php5-opcacheUpgrade php72-shmopUpgrade php72-jsonUpgrade php72-ldapUpgrade php72-pdoUpgrade php72-posixUpgrade php72-odbcUpgrade php7-ftpUpgrade php7-xmlreaderUpgrade php72-dbaUpgrade php72-intlUpgrade php5-posixUpgrade php5-xmlwriterUpgrade php53-bz2Upgrade php53-develUpgrade php7-wddxUpgrade php5-develUpgrade php5-fileinfoUpgrade php5-gettextUpgrade php5-intlUpgrade php53-fastcgiUpgrade php7-pearUpgrade php72-fpmUpgrade php7-embedUpgrade php72-soapUpgrade php7-pcntlUpgrade php5-pspellUpgrade php53-bcmathUpgrade php7-snmpUpgrade php72-pspellUpgrade php7-bcmathUpgrade php7-calendarUpgrade php5-suhosinUpgrade php7-sysvsemUpgrade php53-calendarUpgrade php72-mysqlUpgrade php53-domUpgrade php72-fastcgiUpgrade php53-ldapUpgrade php5-calendarUpgrade php53-jsonUpgrade php72-pharUpgrade php72-fileinfoUpgrade apache2-mod_php72Upgrade php7-fpmUpgrade php5-fpmUpgrade php5-sysvsemUpgrade php7-firebirdUpgrade php53-wddxUpgrade php72-opcacheUpgrade php7-gdUpgrade php53-pgsqlUpgrade php53-suhosinUpgrade php5-gdUpgrade php53-sqliteUpgrade php5-opensslUpgrade php7-iconvUpgrade php7-intlUpgrade php53-curlUpgrade php53-xslUpgrade php53-dbaUpgrade php53-pearUpgrade php53-shmopUpgrade php5-wddxUpgrade php72-pearUpgrade php7-fileinfoUpgrade php72-xmlreaderUpgrade php7-pspellUpgrade php72-xslUpgrade php7-exifUpgrade php7-opcacheUpgrade php72-zipUpgrade apache2-mod_php5Upgrade php72-readlineUpgrade php53-mysqlUpgrade php5-enchantUpgrade php5-pdoUpgrade php7-tokenizerUpgrade php53-mbstringUpgrade php53-ctypeUpgrade php72-gettextUpgrade php72-exifUpgrade php7-sodiumUpgrade php72-enchantUpgrade php53-exifUpgrade php72-calendarUpgrade php5-ftpUpgrade php5-ctypeUpgrade php53-zlibUpgrade php72-pear-archive_tarUpgrade php7-tidyUpgrade php7-ldapUpgrade php72-pgsqlUpgrade apache2-mod_php7Upgrade php7-readlineUpgrade php7-xmlrpcUpgrade php5-soapUpgrade php72-zlibUpgrade php72Upgrade php5-imapUpgrade php5-mcryptUpgrade php72-pcntlUpgrade php53-zipUpgrade php5-tokenizerUpgrade php7-pear-archive_tarUpgrade php5-domUpgrade php5-xmlreaderUpgrade php7-imapUpgrade php72-iconvUpgrade php72-ctypeUpgrade php5-odbcUpgrade php7-gmpUpgrade php53-intlUpgrade php53-fileinfoUpgrade php5-pearUpgrade php53-snmpUpgrade php7-odbcUpgrade php53-posixUpgrade php7-pdoUpgrade php53-xmlwriterUpgrade php5-iconvUpgrade php5-gmpUpgrade php7-socketsUpgrade php5-xslUpgrade php72-gmpUpgrade php7-posixUpgrade php5-xmlrpcUpgrade php5-ldapUpgrade php7-pharUpgrade php72-sysvsemUpgrade php7-develUpgrade php72-bcmathUpgrade php53-pdoUpgrade php53-odbcUpgrade php72-mbstringUpgrade php53-soapUpgrade php72-xmlwriterUpgrade php72-curlUpgrade php53-xmlrpcUpgrade php7-sqliteUpgrade php7-sysvshmUpgrade php72-xmlrpcUpgrade php5-pgsqlUpgrade php5-exifUpgrade php53-sysvshmUpgrade php72-wddxUpgrade php72-sysvshmUpgrade php7-shmopUpgrade php7-jsonUpgrade php5-curlUpgrade php72-ftpUpgrade php53-socketsUpgrade php53-sysvmsgUpgrade php53-readlineUpgrade php7-xslUpgrade php53-opensslUpgrade php7-sysvmsgUpgrade php53-imapUpgrade php5-mbstringUpgrade php53-gettextUpgrade php5-bz2Upgrade php53Upgrade php5-shmopUpgrade php7-soapUpgrade php7-dbaUpgrade php53-sysvsemUpgrade php7-zlibUpgrade php5-sysvmsgUpgrade php7-mysqlUpgrade php72-sqliteUpgrade php53-iconvUpgrade php7Upgrade php53-tokenizerUpgrade php5-sqliteUpgrade php72-tidyUpgrade php53-tidyUpgrade php53-pspellUpgrade php7-testresultsUpgrade php7-domUpgrade php53-xmlreaderUpgrade php7-gettextUpgrade php53-pcntlUpgrade php53-gdUpgrade php5-socketsUpgrade apache2-mod_php53Upgrade php7-mcryptUpgrade php7-mbstringUpgrade php7-bz2Upgrade php5-snmpUpgrade php5-zlibUpgrade php72-develUpgrade php72-snmpUpgrade php72-gd | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php7.2-cliUpgrade php5-fpmUpgrade php7.2-cgiUpgrade php5-cgiUpgrade php7.0-fpmUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-xmlrpcUpgrade php7.0-cgiUpgrade php7.0-cliUpgrade libapache2-mod-php7.0Upgrade php7.2-fpm | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub