An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-mysqlndUpgrade php-snmpUpgrade php-embeddedUpgrade php-opcacheUpgrade php-recodeUpgrade php-enchantUpgrade phpUpgrade php-dbgUpgrade libzip-develUpgrade libzipUpgrade php-xmlUpgrade libzip-toolsUpgrade php-ldapUpgrade apcu-panelUpgrade php-intlUpgrade php-cliUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-pearUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-bcmathUpgrade php-processUpgrade php-gmpUpgrade php-mbstringUpgrade php-soapUpgrade php-gdUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pgsqlUpgrade php-develUpgrade php-common | May 4, 2022 | Mar 9, 2019 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Amazon_linux | — | Upgrade php73Upgrade php72Upgrade php71 | Sep 19, 2019 | Mar 8, 2019 |
| Centos_linux | — | Upgrade php-ldap-debuginfoUpgrade php-pgsqlUpgrade php-pgsql-debuginfoUpgrade phpUpgrade php-mbstring-debuginfoUpgrade php-cliUpgrade libzip-toolsUpgrade php-debuginfoUpgrade libzip-develUpgrade php-snmpUpgrade php-fpm-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-dbgUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-opcacheUpgrade php-snmp-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-commonUpgrade libzip-debugsourceUpgrade php-json-debuginfoUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-processUpgrade php-recodeUpgrade php-odbcUpgrade php-cli-debuginfoUpgrade php-pdo-debuginfoUpgrade php-ldapUpgrade php-dbaUpgrade php-mbstringUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-pdoUpgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade php-pearUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-gdUpgrade php-pecl-zipUpgrade php-soapUpgrade php-jsonUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-develUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade libzip-tools-debuginfoUpgrade libzipUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gd-debuginfoUpgrade php-dba-debuginfoUpgrade php-gmp | Apr 29, 2020 | Mar 9, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade phpUpgrade php-xmlUpgrade php-commonUpgrade php-cliUpgrade php-ldapUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pdoUpgrade php-soapUpgrade php-gdUpgrade php-processUpgrade php-mysql | May 7, 2019 | Mar 8, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pgsqlUpgrade php-odbcUpgrade phpUpgrade php-gdUpgrade php-processUpgrade php-soapUpgrade php-commonUpgrade php-pdoUpgrade php-mysqlUpgrade php-xmlUpgrade php-recodeUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-cli | May 30, 2019 | Mar 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-odbcUpgrade php-mysqlUpgrade php-pdoUpgrade php-processUpgrade php-pgsqlUpgrade php-soapUpgrade php-gdUpgrade php-xmlUpgrade php-cliUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-commonUpgrade phpUpgrade php-ldap | May 7, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Oracle_linux | — | Upgrade php-enchantUpgrade libzipUpgrade php-cliUpgrade php-mbstringUpgrade php-embeddedUpgrade php-pearUpgrade php-recodeUpgrade php-processUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-fpmUpgrade php-develUpgrade php-pdoUpgrade libzip-toolsUpgrade php-intlUpgrade php-gdUpgrade php-dbaUpgrade php-odbcUpgrade phpUpgrade php-gmpUpgrade php-soapUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-commonUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-ldapUpgrade apcu-panel | Jul 22, 2024 | Jan 29, 2019 |
| Php | — | Upgrade to PHP version 7.2.16Upgrade to PHP version 7.1.27Upgrade to PHP version 7.3.3 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | Upgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade php-mbstringUpgrade php-commonUpgrade php-odbcUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-jsonUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-gdUpgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade php-processUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-zip-debugsourceUpgrade php-bcmathUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-enchant-debuginfoUpgrade php-cliUpgrade php-fpm-debuginfoUpgrade apcu-panelUpgrade php-snmp-debuginfoUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoNo solution existsUpgrade php-pgsql-debuginfoUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade libzipUpgrade php-dbgUpgrade php-bcmath-debuginfoUpgrade php-dbaUpgrade libzip-develUpgrade php-ldapUpgrade php-recodeUpgrade libzip-debugsourceUpgrade libzip-toolsUpgrade php-debugsourceUpgrade php-enchantUpgrade php-mysqlndUpgrade phpUpgrade php-json-debuginfoUpgrade php-recode-debuginfoUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-debuginfo | Apr 29, 2020 | Mar 9, 2019 |
| Rocky_linux | — | Upgrade php-snmpUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-mysqlndUpgrade php-pecl-apcu-debugsourceUpgrade php-json-debuginfoUpgrade php-xmlUpgrade php-gd-debuginfoUpgrade php-ldapUpgrade php-odbc-debuginfoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-xml-debuginfoUpgrade phpUpgrade php-gmp-debuginfoUpgrade php-recode-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade php-bcmathUpgrade php-pdoUpgrade php-dbgUpgrade php-cliUpgrade php-dba-debuginfoUpgrade php-jsonUpgrade php-recodeUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade php-xmlrpcUpgrade php-fpm-debuginfoUpgrade php-gdUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-soapUpgrade php-processUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-snmp-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-opcacheUpgrade php-mbstringUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-develUpgrade php-intl-debuginfo | Mar 12, 2024 | Mar 9, 2019 |
| Suse | — | Upgrade php72-wddxUpgrade php7-zipUpgrade php5-opcacheUpgrade php7-tidyUpgrade php72-pearUpgrade php7-sysvshmUpgrade php53-bcmathUpgrade php72-shmopUpgrade php5-mcryptUpgrade php5-enchantUpgrade php7-opcacheUpgrade php5-calendarUpgrade php53-opensslUpgrade php7-dbaUpgrade php53-sysvshmUpgrade php7-firebirdUpgrade php7-imapUpgrade php7Upgrade php72-dbaUpgrade php5Upgrade php7-testresultsUpgrade php72-mbstringUpgrade php53-pcntlUpgrade php53-iconvUpgrade php5-pgsqlUpgrade php72-ctypeUpgrade php5-fpmUpgrade php5-suhosinUpgrade php72-fileinfoUpgrade php7-fileinfoUpgrade php5-odbcUpgrade php72-gdUpgrade php5-bz2Upgrade php72-calendarUpgrade php53-pearUpgrade php72-sysvsemUpgrade php53-dbaUpgrade php5-mysqlUpgrade php53-gmpUpgrade php72-opensslUpgrade php53-readlineUpgrade php72-intlUpgrade php53-bz2Upgrade php5-develUpgrade php7-bz2Upgrade php7-sodiumUpgrade php72-sysvmsgUpgrade php7-xmlreaderUpgrade php53-snmpUpgrade php53-exifUpgrade php72-pcntlUpgrade php7-mcryptUpgrade php53-pspellUpgrade php72-pharUpgrade php7-calendarUpgrade php53-ldapUpgrade php7-gdUpgrade php72-develUpgrade php5-pspellUpgrade php7-gmpUpgrade php5-snmpUpgrade php53-fastcgiUpgrade php7-domUpgrade php72-exifUpgrade php72-enchantUpgrade php7-curlUpgrade php72-opcacheUpgrade php7-intlUpgrade php5-dbaUpgrade php5-gmpUpgrade php53-pdoUpgrade php5-zlibUpgrade php5-curlUpgrade php5-pdoUpgrade php5-gdUpgrade php5-shmopUpgrade php53-tokenizerUpgrade php5-jsonUpgrade php53-gdUpgrade php5-sqliteUpgrade php5-tokenizerUpgrade php7-mysqlUpgrade php72-xslUpgrade php7-xmlrpcUpgrade php53-ctypeUpgrade apache2-mod_php72Upgrade php5-soapUpgrade php72-sysvshmUpgrade php5-pcntlUpgrade php5-ldapUpgrade php72-posixUpgrade php53Upgrade php53-zlibUpgrade php53-intlUpgrade php53-xslUpgrade php53-xmlrpcUpgrade php72-bz2Upgrade php7-pearUpgrade php72-imapUpgrade php7-xslUpgrade php5-pharUpgrade php5-fileinfoUpgrade php7-pspellUpgrade php53-curlUpgrade php7-gettextUpgrade php5-ctypeUpgrade php72-xmlwriterUpgrade php53-mysqlUpgrade php5-xslUpgrade php72-curlUpgrade php7-socketsUpgrade php7-shmopUpgrade php7-ftpUpgrade php53-mcryptUpgrade php72-xmlreaderUpgrade php5-intlUpgrade php5-posixUpgrade php53-soapUpgrade php7-pgsqlUpgrade php53-jsonUpgrade php72-pear-archive_tarUpgrade php7-wddxUpgrade php72-xmlrpcUpgrade php7-readlineUpgrade php7-opensslUpgrade php53-zipUpgrade php53-posixUpgrade php53-tidyUpgrade php53-develUpgrade php7-jsonUpgrade php5-zipUpgrade php5-xmlrpcUpgrade php53-sysvsemUpgrade php7-pear-archive_tarUpgrade php53-shmopUpgrade php7-sysvsemUpgrade php5-fastcgiUpgrade php5-imapUpgrade php72Upgrade php72-soapUpgrade php72-tidyUpgrade php53-ftpUpgrade php7-sqliteUpgrade php5-mbstringUpgrade php72-snmpUpgrade php7-zlibUpgrade php7-xmlwriterUpgrade php5-sysvmsgUpgrade php7-develUpgrade php72-bcmathUpgrade php72-jsonUpgrade php7-odbcUpgrade php53-odbcUpgrade apache2-mod_php53Upgrade php5-sysvsemUpgrade php5-xmlreaderUpgrade php7-sysvmsgUpgrade php72-socketsUpgrade php72-pgsqlUpgrade php7-posixUpgrade php5-sysvshmUpgrade php5-iconvUpgrade php5-gettextUpgrade php53-pgsqlUpgrade php72-zipUpgrade php7-mbstringUpgrade php53-domUpgrade php72-ftpUpgrade php5-ftpUpgrade php72-fpmUpgrade php53-sqliteUpgrade php7-ctypeUpgrade php72-pdoUpgrade php5-domUpgrade php72-domUpgrade php53-sysvmsgUpgrade php7-iconvUpgrade php5-xmlwriterUpgrade php7-pharUpgrade php7-soapUpgrade php7-pdoUpgrade php53-mbstringUpgrade php53-suhosinUpgrade php72-gettextUpgrade php72-readlineUpgrade php72-mysqlUpgrade php72-gmpUpgrade apache2-mod_php5Upgrade php72-fastcgiUpgrade php7-fastcgiUpgrade php72-ldapUpgrade php7-embedUpgrade php53-imapUpgrade php5-wddxUpgrade php5-bcmathUpgrade php7-bcmathUpgrade php53-fileinfoUpgrade php53-xmlwriterUpgrade php5-socketsUpgrade php53-wddxUpgrade php53-xmlreaderUpgrade php7-fpmUpgrade php7-tokenizerUpgrade php5-opensslUpgrade php7-snmpUpgrade php7-ldapUpgrade php72-sqliteUpgrade php72-pspellUpgrade php72-zlibUpgrade php7-enchantUpgrade php53-socketsUpgrade php7-exifUpgrade php53-gettextUpgrade php53-calendarUpgrade php5-exifUpgrade apache2-mod_php7Upgrade php5-pearUpgrade php72-iconvUpgrade php7-pcntlUpgrade php72-tokenizerUpgrade php72-odbc | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php7.2Upgrade php7.2-fpmUpgrade php7.0-cliUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php5-xmlrpcUpgrade php7.2-cliUpgrade libapache2-mod-php7.0Upgrade php7.0-fpmUpgrade php7.0-cgiUpgrade php7.2-cgiUpgrade php5-fpmUpgrade php5-cgi | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub