An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-commonUpgrade php-fpmUpgrade php-dbgUpgrade php-develUpgrade php-intlUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-odbcUpgrade php-soapUpgrade php-gmpUpgrade php-dbaUpgrade php-pdoUpgrade php-bcmathUpgrade libzipUpgrade libzip-toolsUpgrade php-opcacheUpgrade php-pearUpgrade php-mysqlndUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-snmpUpgrade libzip-develUpgrade php-recodeUpgrade phpUpgrade php-xmlUpgrade apcu-panelUpgrade php-cliUpgrade php-processUpgrade php-embeddedUpgrade php-enchantUpgrade php-xmlrpc | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-pearUpgrade php-mysqlnd-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-json-debuginfoUpgrade libzip-toolsUpgrade apcu-panelUpgrade php-snmpUpgrade php-cliUpgrade php-pecl-zip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbgUpgrade php-dba-debuginfoUpgrade php-intl-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-recodeUpgrade php-mbstringUpgrade php-recode-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-bcmath-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmathUpgrade libzipUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-gmpUpgrade php-fpmUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-dbaUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade php-gmp-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade libzip-tools-debuginfoUpgrade php-jsonUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-dbg-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ldapUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-snmp-debuginfoUpgrade phpUpgrade php-gd | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade php-jsonUpgrade libzipUpgrade php-ldapUpgrade php-bcmathUpgrade php-soapUpgrade php-mbstringUpgrade php-gmpUpgrade php-enchantUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-develUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-gdUpgrade php-xmlUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-pearUpgrade libzip-toolsUpgrade libzip-develUpgrade php-odbcUpgrade php-snmpUpgrade php-recodeUpgrade php-dbaUpgrade php-processUpgrade phpUpgrade apcu-panelUpgrade php-commonUpgrade php-mysqlndUpgrade php-cliUpgrade php-intlUpgrade php-opcache | Jul 22, 2024 | Feb 23, 2019 |
| Php | — | Upgrade to PHP version 7.1.27Upgrade to PHP version 7.3.3Upgrade to PHP version 7.2.16 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-embeddedUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-gmp-debuginfoUpgrade php-opcacheUpgrade libzipUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-recodeUpgrade php-enchantUpgrade php-xmlrpc-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-gd-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-soap-debuginfoUpgrade php-fpmUpgrade phpUpgrade php-develUpgrade php-recode-debuginfoUpgrade php-snmpUpgrade php-processUpgrade php-embedded-debuginfoUpgrade libzip-develUpgrade php-pdoUpgrade php-pearUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade php-enchant-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-dbaUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-commonUpgrade php-odbcUpgrade php-ldapUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade apcu-panelUpgrade php-opcache-debuginfoUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcuUpgrade php-pecl-zip-debuginfoUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-tools | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-processUpgrade php-pecl-zip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-mysqlnd-debuginfoUpgrade php-odbc-debuginfoUpgrade libzip-debuginfoUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-develUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-soapUpgrade php-opcache-debuginfoUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-commonUpgrade libzip-tools-debuginfoUpgrade php-dbg-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-debuginfoUpgrade php-jsonUpgrade php-xmlrpc-debuginfoUpgrade php-fpmUpgrade php-pgsqlUpgrade php-common-debuginfoUpgrade php-gd-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-intlUpgrade php-dbaUpgrade php-gdUpgrade php-embeddedUpgrade php-opcacheUpgrade php-xmlUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade libzip-develUpgrade php-process-debuginfoUpgrade php-recode-debuginfoUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-debugsourceUpgrade php-cliUpgrade php-json-debuginfoUpgrade php-ldap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-recodeUpgrade php-mbstring-debuginfoUpgrade php-snmpUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-enchant | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php72-pgsqlUpgrade php53-zipUpgrade php5-odbcUpgrade php72-tidyUpgrade php53-shmopUpgrade php5-enchantUpgrade php7-firebirdUpgrade php53-ctypeUpgrade php5-bz2Upgrade php72-sysvsemUpgrade php72-xmlrpcUpgrade php7-soapUpgrade php53-xslUpgrade php72-fileinfoUpgrade php72-sysvshmUpgrade php5-fastcgiUpgrade php7-gdUpgrade php72-gettextUpgrade php7-jsonUpgrade php7-pspellUpgrade php53-mbstringUpgrade php72-intlUpgrade php53-gdUpgrade php7-posixUpgrade php72-gdUpgrade php7-bz2Upgrade php7-pear-archive_tarUpgrade php53-readlineUpgrade php5-mcryptUpgrade php5-snmpUpgrade php53-iconvUpgrade php5-xmlreaderUpgrade php7-mcryptUpgrade php7-gmpUpgrade php53-snmpUpgrade php53-zlibUpgrade php7-dbaUpgrade php5-calendarUpgrade php5-soapUpgrade php53-posixUpgrade php5-dbaUpgrade php7-xslUpgrade php5-mbstringUpgrade php53Upgrade php7-xmlreaderUpgrade php72-pcntlUpgrade php53-dbaUpgrade php72-ctypeUpgrade php7Upgrade php7-domUpgrade php5-exifUpgrade php5-mysqlUpgrade php53-calendarUpgrade php53-fileinfoUpgrade php7-tidyUpgrade php53-imapUpgrade php7-shmopUpgrade php72-fpmUpgrade php72-sqliteUpgrade php53-sqliteUpgrade php72-bcmathUpgrade php72-dbaUpgrade php5-pharUpgrade php7-xmlrpcUpgrade php53-pearUpgrade php7-gettextUpgrade php5-ldapUpgrade php53-xmlwriterUpgrade php53-pspellUpgrade php72-posixUpgrade php7-readlineUpgrade php7-sqliteUpgrade php72Upgrade php5-sysvmsgUpgrade php53-odbcUpgrade php5-gmpUpgrade php5-ftpUpgrade php5-shmopUpgrade php72-mysqlUpgrade php72-zlibUpgrade php7-opensslUpgrade php72-ftpUpgrade php5-pdoUpgrade php7-sodiumUpgrade php5-iconvUpgrade php53-pdoUpgrade php7-opcacheUpgrade php5-pearUpgrade php72-enchantUpgrade php7-zipUpgrade php5-bcmathUpgrade php7-sysvshmUpgrade php5-sqliteUpgrade php7-exifUpgrade php72-wddxUpgrade php53-sysvshmUpgrade php7-pearUpgrade php7-ldapUpgrade php53-socketsUpgrade php7-embedUpgrade php7-socketsUpgrade php72-mbstringUpgrade php5-sysvsemUpgrade php5-curlUpgrade php72-exifUpgrade php7-imapUpgrade php53-xmlreaderUpgrade php5Upgrade php53-pcntlUpgrade php5-jsonUpgrade php5-xmlwriterUpgrade php72-curlUpgrade php7-xmlwriterUpgrade php72-readlineUpgrade php72-pspellUpgrade php5-sysvshmUpgrade php7-iconvUpgrade php7-bcmathUpgrade php7-enchantUpgrade php72-shmopUpgrade php53-xmlrpcUpgrade php53-tokenizerUpgrade php72-gmpUpgrade php53-sysvsemUpgrade php5-intlUpgrade php5-domUpgrade php7-ftpUpgrade php5-ctypeUpgrade php5-fileinfoUpgrade php5-tokenizerUpgrade php5-imapUpgrade php53-intlUpgrade php5-wddxUpgrade php5-zlibUpgrade php5-opensslUpgrade php5-suhosinUpgrade php72-soapUpgrade php53-sysvmsgUpgrade php72-imapUpgrade php7-curlUpgrade php7-intlUpgrade php7-wddxUpgrade php7-sysvsemUpgrade php7-fileinfoUpgrade php53-gmpUpgrade php72-pdoUpgrade php72-opensslUpgrade php7-zlibUpgrade php53-bz2Upgrade php5-opcacheUpgrade php5-socketsUpgrade apache2-mod_php7Upgrade php7-mbstringUpgrade php72-tokenizerUpgrade php72-xslUpgrade php72-xmlreaderUpgrade php72-pearUpgrade php7-pgsqlUpgrade php7-pcntlUpgrade php72-fastcgiUpgrade php53-exifUpgrade php53-mysqlUpgrade php5-pspellUpgrade php53-gettextUpgrade php72-jsonUpgrade php72-pharUpgrade php72-develUpgrade php72-snmpUpgrade php7-ctypeUpgrade php72-zipUpgrade php72-opcacheUpgrade php7-mysqlUpgrade php53-wddxUpgrade php5-pgsqlUpgrade php72-sysvmsgUpgrade php5-develUpgrade php7-fastcgiUpgrade php53-fastcgiUpgrade php53-ftpUpgrade php72-calendarUpgrade php7-fpmUpgrade php72-odbcUpgrade php72-bz2Upgrade php7-sysvmsgUpgrade php5-posixUpgrade php5-pcntlUpgrade php5-fpmUpgrade apache2-mod_php72Upgrade php53-ldapUpgrade php72-pear-archive_tarUpgrade php53-develUpgrade php53-soapUpgrade php53-bcmathUpgrade php53-jsonUpgrade php72-xmlwriterUpgrade php72-ldapUpgrade php72-iconvUpgrade php53-opensslUpgrade php7-snmpUpgrade php7-tokenizerUpgrade apache2-mod_php53Upgrade apache2-mod_php5Upgrade php5-gdUpgrade php7-pharUpgrade php53-mcryptUpgrade php7-testresultsUpgrade php72-socketsUpgrade php7-develUpgrade php53-domUpgrade php5-xmlrpcUpgrade php53-suhosinUpgrade php53-curlUpgrade php5-zipUpgrade php7-calendarUpgrade php53-tidyUpgrade php53-pgsqlUpgrade php5-gettextUpgrade php7-pdoUpgrade php7-odbcUpgrade php5-xslUpgrade php72-dom | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php7.2-cliUpgrade php7.0-fpmUpgrade php7.0-cliUpgrade php5-xmlrpcUpgrade php7.2-fpmUpgrade php5-cgiUpgrade php5-fpmUpgrade php7.0-cgiUpgrade libapache2-mod-php7.0Upgrade libapache2-mod-php5Upgrade php7.2-cgiUpgrade php5-cliUpgrade libapache2-mod-php7.2 | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub