An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-enchantUpgrade phpUpgrade php-mysqlndUpgrade php-cliUpgrade php-ldapUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade php-pearUpgrade libzip-toolsUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-snmpUpgrade php-xmlUpgrade php-recodeUpgrade libzipUpgrade php-gdUpgrade php-processUpgrade php-gmpUpgrade php-develUpgrade php-fpmUpgrade php-jsonUpgrade php-intlUpgrade php-odbcUpgrade php-pdoUpgrade php-dbaUpgrade php-mbstringUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-soapUpgrade php-pgsqlUpgrade php-bcmath | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-enchant-debuginfoUpgrade php-pearUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade php-cliUpgrade php-commonUpgrade php-bcmath-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade apcu-panelUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbgUpgrade php-mbstringUpgrade php-pecl-zip-debuginfoUpgrade php-recode-debuginfoUpgrade php-odbcUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-intlUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade libzip-toolsUpgrade libzip-develUpgrade php-opcacheUpgrade php-xmlUpgrade php-pecl-apcuUpgrade libzipUpgrade php-dbaUpgrade php-debugsourceUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-odbc-debuginfoUpgrade php-gmpUpgrade php-fpmUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-embeddedUpgrade php-ldapUpgrade php-xml-debuginfoUpgrade php-gd-debuginfoUpgrade php-jsonUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade phpUpgrade php-xmlrpcUpgrade php-bcmathUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-processUpgrade php-pdo-debuginfoUpgrade php-pdo | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-intlUpgrade php-cliUpgrade php-snmpUpgrade php-mysqlndUpgrade libzip-develUpgrade php-commonUpgrade phpUpgrade php-recodeUpgrade php-opcacheUpgrade php-dbaUpgrade libzip-toolsUpgrade php-odbcUpgrade php-processUpgrade php-pdoUpgrade php-gmpUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-enchantUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-soapUpgrade php-mbstringUpgrade php-ldapUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-gdUpgrade php-xmlUpgrade php-dbgUpgrade php-pearUpgrade php-develUpgrade php-json | Jul 22, 2024 | Feb 23, 2019 |
| Php | — | Upgrade to PHP version 7.1.27Upgrade to PHP version 7.2.16Upgrade to PHP version 7.3.3 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-xml-debuginfoUpgrade php-soapUpgrade php-common-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdo-debuginfoUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-jsonUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade php-pecl-apcuUpgrade php-intlUpgrade php-cli-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-dbgUpgrade libzip-toolsUpgrade php-fpm-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-process-debuginfoUpgrade php-commonUpgrade apcu-panelUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-soap-debuginfoUpgrade php-pdoUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-mbstringUpgrade php-debugsourceUpgrade php-xmlrpcUpgrade php-pearUpgrade libzip-tools-debuginfoUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-xmlUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-snmpUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-fpmUpgrade libzip-develUpgrade php-mysqlndUpgrade php-cliUpgrade php-embeddedUpgrade php-recodeUpgrade php-gd-debuginfo | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-processUpgrade php-bcmathUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade php-dba-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-common-debuginfoUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-soapUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-commonUpgrade php-mbstringUpgrade php-opcache-debuginfoUpgrade php-pgsqlUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade php-jsonUpgrade php-pdoUpgrade php-recode-debuginfoUpgrade php-dbgUpgrade php-xmlUpgrade php-process-debuginfoUpgrade libzipUpgrade php-soap-debuginfoUpgrade phpUpgrade php-debuginfoUpgrade php-cliUpgrade php-ldap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-mysqlndUpgrade libzip-develUpgrade php-pecl-apcu-debugsourceUpgrade php-enchantUpgrade php-recodeUpgrade php-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-gmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-opcacheUpgrade php-ldapUpgrade php-intlUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-gdUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-tools | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php7-enchantUpgrade php53-domUpgrade php53-jsonUpgrade php7-iconvUpgrade php5-tokenizerUpgrade php72-ldapUpgrade php5-ctypeUpgrade php7-mysqlUpgrade php53-wddxUpgrade php5-develUpgrade php7-bcmathUpgrade php72-iconvUpgrade php7-calendarUpgrade php7-curlUpgrade php5-zlibUpgrade php53-bz2Upgrade php53-exifUpgrade apache2-mod_php5Upgrade php72-opensslUpgrade php72-xmlreaderUpgrade php72-xslUpgrade php72-tokenizerUpgrade php5-opcacheUpgrade php7-mbstringUpgrade php72-fastcgiUpgrade php5-pspellUpgrade php53-ldapUpgrade php72-bz2Upgrade php5-posixUpgrade php7-sysvmsgUpgrade php5-pcntlUpgrade php53-xmlrpcUpgrade apache2-mod_php72Upgrade php5-socketsUpgrade php7-pgsqlUpgrade apache2-mod_php7Upgrade php72-gmpUpgrade php53-mysqlUpgrade php7-ctypeUpgrade php72-calendarUpgrade php7-xmlwriterUpgrade php53-sysvmsgUpgrade php72-zipUpgrade php53-fastcgiUpgrade php7-tokenizerUpgrade php72-imapUpgrade php5-gdUpgrade php72-pspellUpgrade php7-fpmUpgrade php72-readlineUpgrade php5-xmlwriterUpgrade php5-fpmUpgrade php7-fastcgiUpgrade php72-curlUpgrade apache2-mod_php53Upgrade php5-zipUpgrade php5-pgsqlUpgrade php7-pharUpgrade php5-domUpgrade php72-pdoUpgrade php72-pear-archive_tarUpgrade php72-domUpgrade php7-intlUpgrade php7-fileinfoUpgrade php53-tokenizerUpgrade php72-jsonUpgrade php72-sysvmsgUpgrade php53-bcmathUpgrade php5-sysvshmUpgrade php72-opcacheUpgrade php72-pearUpgrade php53-soapUpgrade php7-pcntlUpgrade php72-pharUpgrade php72-soapUpgrade php53-mcryptUpgrade php53-gettextUpgrade php7-sysvsemUpgrade php5-imapUpgrade php5-opensslUpgrade php5-fileinfoUpgrade php5-suhosinUpgrade php53-ftpUpgrade php72-socketsUpgrade php53-intlUpgrade php53-develUpgrade php7-develUpgrade php53-curlUpgrade php7-zlibUpgrade php7-ftpUpgrade php53-gmpUpgrade php5-intlUpgrade php53-tidyUpgrade php72-snmpUpgrade php72-develUpgrade php53-pgsqlUpgrade php7-odbcUpgrade php5-xslUpgrade php7-pdoUpgrade php53-sysvsemUpgrade php53-opensslUpgrade php5-wddxUpgrade php7-wddxUpgrade php5-gettextUpgrade php5-xmlrpcUpgrade php72-shmopUpgrade php53-suhosinUpgrade php7-testresultsUpgrade php7-snmpUpgrade php72-xmlwriterUpgrade php72-odbcUpgrade php53-posixUpgrade php5-curlUpgrade php7-sodiumUpgrade php7-pearUpgrade php53-shmopUpgrade php5-jsonUpgrade php53-zipUpgrade php5Upgrade php7-firebirdUpgrade php5-mcryptUpgrade php7-imapUpgrade php72-mbstringUpgrade php53-pcntlUpgrade php53-pearUpgrade php7-xmlreaderUpgrade php7-gdUpgrade php72-enchantUpgrade php72-fpmUpgrade php53-xslUpgrade php72-dbaUpgrade php72-exifUpgrade php72-gdUpgrade php53-xmlreaderUpgrade php5-bz2Upgrade php53-mbstringUpgrade php7-domUpgrade php7-gmpUpgrade php5-enchantUpgrade php7-socketsUpgrade php72-ftpUpgrade php5-ldapUpgrade php53Upgrade php7-shmopUpgrade php7-soapUpgrade php7-mcryptUpgrade php53-snmpUpgrade php7-jsonUpgrade php72-pcntlUpgrade php53-xmlwriterUpgrade php7-opensslUpgrade php5-sqliteUpgrade php5-bcmathUpgrade php5-calendarUpgrade php53-calendarUpgrade php7-dbaUpgrade php72-tidyUpgrade php53-fileinfoUpgrade php5-sysvsemUpgrade php53-sysvshmUpgrade php72-mysqlUpgrade php5-fastcgiUpgrade php53-socketsUpgrade php53-sqliteUpgrade php5-pearUpgrade php7-zipUpgrade php53-gdUpgrade php5-snmpUpgrade php7-xslUpgrade php72-posixUpgrade php5-xmlreaderUpgrade php72-ctypeUpgrade php7-ldapUpgrade php5-dbaUpgrade php53-pdoUpgrade php5-mbstringUpgrade php72-sysvshmUpgrade php72-zlibUpgrade php7-embedUpgrade php5-shmopUpgrade php5-soapUpgrade php72-sysvsemUpgrade php53-iconvUpgrade php5-odbcUpgrade php72-gettextUpgrade php53-pspellUpgrade php7-exifUpgrade php53-imapUpgrade php7Upgrade php7-sqliteUpgrade php7-gettextUpgrade php7-readlineUpgrade php72Upgrade php72-wddxUpgrade php72-intlUpgrade php5-pdoUpgrade php53-ctypeUpgrade php72-sqliteUpgrade php5-gmpUpgrade php72-bcmathUpgrade php7-xmlrpcUpgrade php7-tidyUpgrade php5-exifUpgrade php72-fileinfoUpgrade php5-pharUpgrade php7-opcacheUpgrade php5-iconvUpgrade php53-odbcUpgrade php7-pspellUpgrade php72-xmlrpcUpgrade php53-dbaUpgrade php53-zlibUpgrade php5-mysqlUpgrade php5-ftpUpgrade php7-bz2Upgrade php7-sysvshmUpgrade php5-sysvmsgUpgrade php7-pear-archive_tarUpgrade php53-readlineUpgrade php72-pgsqlUpgrade php7-posix | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php5-xmlrpcUpgrade php7.0-fpmUpgrade php7.2-cliUpgrade php7.2-fpmUpgrade php5-cgiUpgrade php7.0-cliUpgrade php5-fpmUpgrade php5-cliUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5Upgrade php7.0-cgiUpgrade php7.2-cgiUpgrade libapache2-mod-php7.0 | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub