An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Mar 8, 2019 |
| Debian | — | Upgrade php7.3 | Mar 12, 2019 | Mar 8, 2019 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.32-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.9-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Mar 9, 2019 |
| Php | — | Upgrade to PHP version 7.2.16Upgrade to PHP version 7.1.27Upgrade to PHP version 7.3.3 | Mar 12, 2019 | Mar 8, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2019 |
| Suse | — | Upgrade php53-pcntlUpgrade php72-zlibUpgrade php5-opcacheUpgrade php72Upgrade php72-fpmUpgrade php53-ldapUpgrade php53-pearUpgrade php72-snmpUpgrade php53-dbaUpgrade php53-sysvshmUpgrade php72-shmopUpgrade php5-mcryptUpgrade php7-intlUpgrade php72-bz2Upgrade php53-imapUpgrade php7-gdUpgrade php72-ctypeUpgrade php53-tidyUpgrade php72-sysvsemUpgrade php5-pcntlUpgrade php5-odbcUpgrade php7-exifUpgrade php72-mysqlUpgrade php7-tidyUpgrade php53-shmopUpgrade php7-opensslUpgrade php53-bz2Upgrade php72-exifUpgrade php5-develUpgrade php5-sysvsemUpgrade libmemcached-develUpgrade php53-zipUpgrade php53-snmpUpgrade php7-soapUpgrade php72-pcntlUpgrade php7-embedUpgrade php7-xslUpgrade php72-zipUpgrade php7-sysvshmUpgrade php7-pspellUpgrade php53-readlineUpgrade php72-fileinfoUpgrade libtidy-0_99-0-develUpgrade php5-opensslUpgrade php5-pharUpgrade php5-xmlreaderUpgrade php5-fastcgiUpgrade php7-sqliteUpgrade php7-xmlrpcUpgrade php72-gdUpgrade php5-curlUpgrade php5-bcmathUpgrade php5-calendarUpgrade php5-bz2Upgrade php5-jsonUpgrade php7-socketsUpgrade php53-zlibUpgrade php53-calendarUpgrade php7-sodiumUpgrade php53Upgrade php53-sqliteUpgrade php53-gmpUpgrade php5Upgrade php7-pdoUpgrade php53-curlUpgrade php53-pdoUpgrade php5-mysqlUpgrade php72-bcmathUpgrade php5-snmpUpgrade php5-soapUpgrade php5-xmlwriterUpgrade php7-bz2Upgrade php7-curlUpgrade php7Upgrade php7-dbaUpgrade php7-posixUpgrade php72-opcacheUpgrade php7-xmlreaderUpgrade php72-pdoUpgrade php53-mcryptUpgrade php53-bcmathUpgrade php72-posixUpgrade php7-opcacheUpgrade php5-pdoUpgrade php7-zipUpgrade php53-gettextUpgrade php72-xmlrpcUpgrade php7-fpmUpgrade php7-imapUpgrade php5-ftpUpgrade php7-pcntlUpgrade php72-pgsqlUpgrade php53-xmlreaderUpgrade php7-gettextUpgrade php7-gmpUpgrade php5-sqliteUpgrade php7-firebirdUpgrade php53-fastcgiUpgrade php72-wddxUpgrade php53-iconvUpgrade php72-sysvshmUpgrade php53-gdUpgrade php5-gmpUpgrade libmemcachedUpgrade php53-ctypeUpgrade php5-shmopUpgrade php53-suhosinUpgrade php72-imapUpgrade php72-sysvmsgUpgrade php72-mbstringUpgrade php53-socketsUpgrade php53-posixUpgrade php7-domUpgrade php7-pearUpgrade php72-xmlwriterUpgrade php53-odbcUpgrade php53-mbstringUpgrade php7-testresultsUpgrade php72-gmpUpgrade php72-pharUpgrade php5-enchantUpgrade php53-tokenizerUpgrade php53-pgsqlUpgrade php7-mysqlUpgrade php7-bcmathUpgrade php5-mbstringUpgrade php7-readlineUpgrade php5-ctypeUpgrade php72-readlineUpgrade php5-domUpgrade php72-pear-archive_tarUpgrade php7-snmpUpgrade php53-sysvsemUpgrade php72-enchantUpgrade php5-sysvmsgUpgrade apache2-mod_php72Upgrade php5-gdUpgrade php53-develUpgrade php72-ftpUpgrade php72-tokenizerUpgrade php72-calendarUpgrade php7-wddxUpgrade php5-suhosinUpgrade php5-pgsqlUpgrade php5-ldapUpgrade php5-dbaUpgrade php5-intlUpgrade libmemcachedutil2Upgrade php5-fpmUpgrade php7-sysvmsgUpgrade libtidy-0_99-0Upgrade php5-posixUpgrade php53-xmlwriterUpgrade php7-iconvUpgrade php72-fastcgiUpgrade php53-exifUpgrade php5-fileinfoUpgrade php72-socketsUpgrade php72-memcachedUpgrade php7-sysvsemUpgrade php53-wddxUpgrade php53-ftpUpgrade php5-wddxUpgrade php7-jsonUpgrade php72-soapUpgrade php7-odbcUpgrade php5-zipUpgrade php7-ftpUpgrade php53-soapUpgrade php5-imapUpgrade php72-develUpgrade php72-xmlreaderUpgrade php53-xslUpgrade php72-iconvUpgrade php53-fileinfoUpgrade php72-ldapUpgrade php72-intlUpgrade php5-xslUpgrade apache2-mod_php53Upgrade apache2-mod_php7Upgrade php72-curlUpgrade php53-xmlrpcUpgrade php7-xmlwriterUpgrade php5-sysvshmUpgrade php7-calendarUpgrade php5-xmlrpcUpgrade php7-shmopUpgrade php7-enchantUpgrade php5-exifUpgrade php53-opensslUpgrade php53-domUpgrade php7-pharUpgrade php7-develUpgrade php53-jsonUpgrade php7-mcryptUpgrade php72-gettextUpgrade php7-fastcgiUpgrade php5-socketsUpgrade php72-domUpgrade php53-intlUpgrade php72-jsonUpgrade php72-odbcUpgrade tidyUpgrade php72-pspellUpgrade php72-opensslUpgrade php72-dbaUpgrade php53-sysvmsgUpgrade php5-zlibUpgrade libmemcached11Upgrade php5-pearUpgrade apache2-mod_php5Upgrade php7-zlibUpgrade php7-fileinfoUpgrade php72-xslUpgrade php72-tidyUpgrade php5-gettextUpgrade php7-tokenizerUpgrade php5-tokenizerUpgrade php7-ldapUpgrade php5-pspellUpgrade php53-mysqlUpgrade php7-pgsqlUpgrade php53-pspellUpgrade php7-ctypeUpgrade php72-sqliteUpgrade php72-pearUpgrade php7-mbstringUpgrade php7-pear-archive_tarUpgrade php5-iconv | Apr 6, 2019 | Mar 8, 2019 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php7.0-fpmUpgrade php7.2-cliUpgrade php5-xmlrpcUpgrade php5-cliUpgrade php5-cgiUpgrade libapache2-mod-php7.0Upgrade php7.0-cgiUpgrade php7.2-cgiUpgrade php7.2-fpmUpgrade php7.0-cliUpgrade php5-fpmUpgrade libapache2-mod-php7.2 | Apr 3, 2019 | Mar 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub