An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libzipUpgrade php-ldapUpgrade libzip-toolsUpgrade php-embeddedUpgrade apcu-panelUpgrade php-xmlUpgrade php-opcacheUpgrade php-snmpUpgrade php-dbgUpgrade php-enchantUpgrade phpUpgrade php-cliUpgrade php-intlUpgrade php-recodeUpgrade libzip-develUpgrade php-mysqlndUpgrade php-processUpgrade php-develUpgrade php-jsonUpgrade php-gmpUpgrade php-dbaUpgrade php-mbstringUpgrade php-soapUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-commonUpgrade php-pgsqlUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-pearUpgrade php-gd | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade php72Upgrade php71Upgrade php73 | Sep 19, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-dbg-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-pearUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-gdUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade php-xmlUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-develUpgrade php-intl-debuginfoUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-gd-debuginfoUpgrade php-recode-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-enchantUpgrade php-bcmathUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfoUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-embeddedUpgrade php-opcache-debuginfoUpgrade php-ldap-debuginfoUpgrade php-cliUpgrade php-snmpUpgrade php-opcacheUpgrade php-cli-debuginfoUpgrade phpUpgrade php-pgsqlUpgrade php-recodeUpgrade php-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-process-debuginfoUpgrade php-mysqlndUpgrade php-ldapUpgrade php-debuginfoUpgrade php-fpm-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gmp-debuginfoUpgrade php-json-debuginfoUpgrade libzip-develUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-odbcUpgrade apcu-panel | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade php-cliUpgrade phpUpgrade php-xmlrpcUpgrade php-commonUpgrade php-recodeUpgrade php-ldapUpgrade php-xmlUpgrade php-gdUpgrade php-soapUpgrade php-pdoUpgrade php-mysqlUpgrade php-processUpgrade php-pgsql | May 7, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlrpcUpgrade php-cliUpgrade php-recodeUpgrade php-commonUpgrade php-xmlUpgrade php-mysqlUpgrade php-ldapUpgrade php-pdoUpgrade phpUpgrade php-odbcUpgrade php-soapUpgrade php-gdUpgrade php-processUpgrade php-pgsql | May 30, 2019 | Mar 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-odbcUpgrade php-pdoUpgrade php-mysqlUpgrade php-processUpgrade php-soapUpgrade php-pgsqlUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-recodeUpgrade phpUpgrade php-common | May 7, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade libzip-develUpgrade php-develUpgrade php-embeddedUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-xmlUpgrade php-fpmUpgrade php-recodeUpgrade php-mysqlndUpgrade php-enchantUpgrade php-pearUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-snmpUpgrade libzipUpgrade php-processUpgrade php-cliUpgrade phpUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-gdUpgrade libzip-toolsUpgrade php-intlUpgrade php-odbcUpgrade php-dbaUpgrade php-soapUpgrade php-commonUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-gmp | Jul 22, 2024 | Jan 29, 2019 |
| Php | — | Upgrade to PHP version 7.3.3Upgrade to PHP version 7.1.27Upgrade to PHP version 7.2.16 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-pdo-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-enchant-debuginfoUpgrade php-jsonUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-soapUpgrade php-gmpUpgrade php-pdoUpgrade libzip-tools-debuginfoUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-commonUpgrade php-mbstringUpgrade php-develUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-gdUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-dba-debuginfoUpgrade php-pearUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-snmp-debuginfoUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-intlUpgrade libzip-debuginfoUpgrade apcu-panelNo solution existsUpgrade php-debuginfoUpgrade php-enchantUpgrade libzip-toolsUpgrade phpUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-recodeUpgrade php-pgsql-debuginfoUpgrade php-process-debuginfoUpgrade libzipUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-develUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gd-debuginfoUpgrade php-debugsourceUpgrade php-cliUpgrade php-mbstring-debuginfoUpgrade php-dbaUpgrade php-recode-debuginfo | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-develUpgrade php-fpmUpgrade libzipUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-json-debuginfoUpgrade php-jsonUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-mbstring-debuginfoUpgrade php-recodeUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-snmpUpgrade libzip-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-embeddedUpgrade php-commonUpgrade php-pdoUpgrade php-bcmathUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade php-embedded-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-mysqlndUpgrade php-pecl-apcu-debugsourceUpgrade php-debuginfoUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-pgsqlUpgrade php-intlUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade php-opcache-debuginfoUpgrade libzip-debugsourceUpgrade php-opcacheUpgrade php-mbstringUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-fpm-debuginfoUpgrade php-enchantUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php7-fastcgiUpgrade php5-domUpgrade php5-mbstringUpgrade php7-sysvmsgUpgrade php72-bcmathUpgrade php72-snmpUpgrade php7-bcmathUpgrade php5-xmlrpcUpgrade php53-suhosinUpgrade apache2-mod_php7Upgrade php53-gettextUpgrade php5-sysvshmUpgrade php5-pearUpgrade php5-exifUpgrade php7-ftpUpgrade php7-pdoUpgrade php7-pcntlUpgrade php53-calendarUpgrade php7-develUpgrade php53-ftpUpgrade php7-zlibUpgrade php5-sysvmsgUpgrade php72-jsonUpgrade apache2-mod_php53Upgrade php53-socketsUpgrade php7-enchantUpgrade php53-pgsqlUpgrade php7-exifUpgrade php53-mysqlUpgrade php7-shmopUpgrade php53-tidyUpgrade php72-tokenizerUpgrade php72-iconvUpgrade php5-ftpUpgrade php5-opensslUpgrade php53-xmlreaderUpgrade php7-ctypeUpgrade php7-socketsUpgrade php72-pspellUpgrade apache2-mod_php5Upgrade php5-xmlwriterUpgrade php53-domUpgrade php53-sqliteUpgrade php7-snmpUpgrade php7-tokenizerUpgrade php7-mbstringUpgrade php72-ftpUpgrade php7-fpmUpgrade php72-sqliteUpgrade php72-zlibUpgrade php53-wddxUpgrade php5-ctypeUpgrade php53-curlUpgrade php5-socketsUpgrade php7-jsonUpgrade php72-tidyUpgrade php53-jsonUpgrade php7-opensslUpgrade php72-xmlrpcUpgrade php7-odbcUpgrade php53-posixUpgrade php5-gettextUpgrade php7-readlineUpgrade php72-soapUpgrade php5-iconvUpgrade php7-posixUpgrade php53-develUpgrade php5-sysvsemUpgrade php72-socketsUpgrade php7-sysvsemUpgrade php7-xmlwriterUpgrade php5-imapUpgrade php72-curlUpgrade php53-zipUpgrade php7-gettextUpgrade php72-ldapUpgrade php5-xmlreaderUpgrade php72-fpmUpgrade php7-sqliteUpgrade php72-pdoUpgrade php5-posixUpgrade php72-pear-archive_tarUpgrade php72-odbcUpgrade php7-pharUpgrade php7-soapUpgrade php53-sysvmsgUpgrade php72-gmpUpgrade php53-imapUpgrade php53-soapUpgrade php72-mysqlUpgrade php72-pgsqlUpgrade php7-pgsqlUpgrade php53-fileinfoUpgrade php5-fastcgiUpgrade php53-mbstringUpgrade php5-wddxUpgrade php53-mcryptUpgrade php53-odbcUpgrade php72-domUpgrade php7-embedUpgrade php72-xmlwriterUpgrade php7-wddxUpgrade php72-fastcgiUpgrade php5-zipUpgrade php72-readlineUpgrade php72-gettextUpgrade php7-pear-archive_tarUpgrade php53-shmopUpgrade php53-sysvsemUpgrade php72Upgrade php5-xslUpgrade php7-ldapUpgrade php72-xmlreaderUpgrade php7-iconvUpgrade php5-intlUpgrade php5-bcmathUpgrade php72-zipUpgrade php53-xmlwriterUpgrade php5-pgsqlUpgrade php7-testresultsUpgrade php5-gmpUpgrade php7-dbaUpgrade php72-opcacheUpgrade php5-dbaUpgrade php5-shmopUpgrade php72-enchantUpgrade php7-gdUpgrade php7-curlUpgrade php5-zlibUpgrade php53-pdoUpgrade php5-tokenizerUpgrade php7-bz2Upgrade php53-dbaUpgrade php7-zipUpgrade php53-exifUpgrade php5-sqliteUpgrade php53-readlineUpgrade php7-opcacheUpgrade php5-fpmUpgrade php53-pcntlUpgrade php53-gmpUpgrade php5-suhosinUpgrade php5-mysqlUpgrade php5-bz2Upgrade php7-mcryptUpgrade php72-shmopUpgrade php72-pcntlUpgrade php72-pharUpgrade php72-pearUpgrade php72-mbstringUpgrade php72-exifUpgrade php7-xmlreaderUpgrade php5-pspellUpgrade php5-opcacheUpgrade php72-sysvsemUpgrade php5-develUpgrade php53-xslUpgrade php53-pspellUpgrade php7-domUpgrade php7-imapUpgrade php72-wddxUpgrade php7-calendarUpgrade php72-gdUpgrade php53-fastcgiUpgrade php5-soapUpgrade php5-odbcUpgrade php72-ctypeUpgrade php7-fileinfoUpgrade php72-sysvshmUpgrade php53-ldapUpgrade php72-xslUpgrade php53-tokenizerUpgrade php53-intlUpgrade php5-jsonUpgrade php5-curlUpgrade php53Upgrade php53-zlibUpgrade php5-fileinfoUpgrade php5-pharUpgrade apache2-mod_php72Upgrade php53-ctypeUpgrade php53-bz2Upgrade php7-xslUpgrade php72-imapUpgrade php7-pspellUpgrade php53-pearUpgrade php53-bcmathUpgrade php5-enchantUpgrade php7-sodiumUpgrade php5Upgrade php5-snmpUpgrade php7Upgrade php72-calendarUpgrade php7-pearUpgrade php7-mysqlUpgrade php53-iconvUpgrade php72-opensslUpgrade php7-xmlrpcUpgrade php5-gdUpgrade php5-mcryptUpgrade php7-tidyUpgrade php5-pcntlUpgrade php5-ldapUpgrade php53-snmpUpgrade php72-sysvmsgUpgrade php53-xmlrpcUpgrade php7-gmpUpgrade php72-posixUpgrade php72-bz2Upgrade php72-intlUpgrade php72-dbaUpgrade php7-sysvshmUpgrade php7-firebirdUpgrade php5-calendarUpgrade php5-pdoUpgrade php7-intlUpgrade php72-develUpgrade php53-opensslUpgrade php53-gdUpgrade php72-fileinfoUpgrade php53-sysvshm | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade php5-fpmUpgrade php5-cgiUpgrade php7.2-cgiUpgrade php7.0-fpmUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.0-cliUpgrade php7.2-fpmUpgrade php5-xmlrpcUpgrade php5-cliUpgrade libapache2-mod-php5Upgrade php7.2-cliUpgrade libapache2-mod-php7.2 | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub