In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-intlUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-recodeUpgrade php-snmpUpgrade php-commonUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-embeddedUpgrade libzip-develUpgrade php-pecl-xdebugUpgrade php-cliUpgrade php-opcacheUpgrade phpUpgrade php-pearUpgrade php-xmlUpgrade php-pdoUpgrade php-processUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-enchantUpgrade libzipUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-dbaUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-soapUpgrade php-develUpgrade php-jsonUpgrade php-odbcUpgrade php-ldap | May 4, 2022 | Apr 1, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 1, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | May 15, 2020 | Apr 1, 2020 |
| Centos_linux | — | Upgrade php-pecl-apcu-debugsourceUpgrade php-common-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcuUpgrade php-cliUpgrade php-gmp-debuginfoUpgrade php-odbcUpgrade php-gd-debuginfoUpgrade php-mysqlndUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-debugsourceUpgrade php-pecl-zipUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade libzip-debuginfoUpgrade php-embeddedUpgrade php-dba-debuginfoUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-recodeUpgrade php-pdoUpgrade php-bcmathUpgrade php-enchant-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-gmpUpgrade php-jsonUpgrade php-snmpUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-xmlrpcUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-odbc-debuginfoUpgrade php-mbstringUpgrade libzip-develUpgrade libzip-tools-debuginfoUpgrade php-opcacheUpgrade libzip-toolsUpgrade php-xml-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intlUpgrade php-gd | Sep 9, 2020 | Apr 1, 2020 |
| Debian | — | Upgrade php7.4 | Apr 28, 2020 | Apr 1, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Mar 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade phpUpgrade php-processUpgrade php-recodeUpgrade php-cliUpgrade php-ldapUpgrade php-gdUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-odbcUpgrade php-pdoUpgrade php-commonUpgrade php-soap | Sep 28, 2020 | Apr 1, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-odbcUpgrade php-soapUpgrade php-ldapUpgrade phpUpgrade php-commonUpgrade php-gdUpgrade php-recodeUpgrade php-pdoUpgrade php-cliUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-process | May 27, 2020 | Apr 1, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade php-develUpgrade php-cliUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-gdUpgrade php-recodeUpgrade php-pdoUpgrade libzipUpgrade php-processUpgrade php-xmlUpgrade php-snmpUpgrade php-fpmUpgrade libzip-develUpgrade php-embeddedUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-gmpUpgrade php-dbgUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-ldapUpgrade php-odbcUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-intlUpgrade php-jsonUpgrade php-commonUpgrade php-soapUpgrade php-pecl-apcuUpgrade php-dbaUpgrade apcu-panel | Sep 10, 2020 | Apr 1, 2020 |
| Php | — | Upgrade to PHP version 7.4.4Upgrade to PHP version 7.3.16Upgrade to PHP version 7.2.9 | Apr 6, 2020 | Apr 1, 2020 |
| Redhat_linux | — | Upgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-pecl-zip-debugsourceUpgrade php-intl-debuginfoUpgrade php-dbaUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pdoUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade libzipUpgrade php-mbstringUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-soapUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-odbcUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-apcu-debugsourceUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-pgsqlUpgrade php-cli-debuginfoUpgrade php-dba-debuginfoUpgrade php-enchantUpgrade php-snmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-embeddedUpgrade php-intlUpgrade php-commonUpgrade php-recode-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoNo solution existsUpgrade php-enchant-debuginfoUpgrade php-recodeUpgrade php-cliUpgrade php-xmlrpcUpgrade php-debuginfoUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade apcu-panelUpgrade php-pearUpgrade libzip-develUpgrade phpUpgrade php-xmlUpgrade php-snmpUpgrade php-dbgUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-gmp-debuginfoUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd | Sep 9, 2020 | Apr 1, 2020 |
| Rocky_linux | — | Upgrade php-pecl-zipUpgrade php-recode-debuginfoUpgrade php-opcacheUpgrade php-fpmUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-json-debuginfoUpgrade php-intlUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade php-cliUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-commonUpgrade php-mbstring-debuginfoUpgrade php-develUpgrade php-embedded-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-embeddedUpgrade php-odbc-debuginfoUpgrade php-snmpUpgrade php-xml-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-common-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-odbcUpgrade php-xmlrpc-debuginfoUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-recodeUpgrade php-gdUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-processUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade libzip-toolsUpgrade libzip-tools-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade libzip-develUpgrade php-pgsql-debuginfoUpgrade php-dbg-debuginfo | Mar 12, 2024 | Apr 1, 2020 |
| Suse | — | Upgrade php5-posixUpgrade php5-sysvshmUpgrade php5-odbcUpgrade php7-sysvsemUpgrade php7-develUpgrade php5-bz2Upgrade php7-mysqlUpgrade php7-sysvshmUpgrade php72-pcntlUpgrade php72-jsonUpgrade php5-suhosinUpgrade php72-dbaUpgrade php72-posixUpgrade php7-readlineUpgrade php72-bz2Upgrade php7-xmlrpcUpgrade php5-bcmathUpgrade php7-fileinfoUpgrade php7-opensslUpgrade php5-tokenizerUpgrade php5-ldapUpgrade php72-sysvshmUpgrade php5-pearUpgrade php5-snmpUpgrade php5-domUpgrade php72-domUpgrade php72-gdUpgrade php5-dbaUpgrade php72-zipUpgrade php5-socketsUpgrade php5-shmopUpgrade php7-testUpgrade php72-pdoUpgrade php7-pcntlUpgrade php72-wddxUpgrade php7-xslUpgrade php5-enchantUpgrade php72-shmopUpgrade php72-develUpgrade php72-sqliteUpgrade php72-pharUpgrade php7-fastcgiUpgrade php72-fileinfoUpgrade php5-fpmUpgrade php5-sysvmsgUpgrade libtidy5Upgrade php72-mbstringUpgrade php5-iconvUpgrade php5-intlUpgrade php72-ldapUpgrade php72-calendarUpgrade php72-enchantUpgrade php5-curlUpgrade php7-firebirdUpgrade php72-xslUpgrade php7-ctypeUpgrade php72-tokenizerUpgrade php5-gdUpgrade php7-jsonUpgrade php5-zlibUpgrade php5-soapUpgrade php7-odbcUpgrade php72-opensslUpgrade php5-fileinfoUpgrade php7-dbaUpgrade php5-calendarUpgrade php5-sqliteUpgrade apache2-mod_php72Upgrade php5-pgsqlUpgrade php72-intlUpgrade php72-pearUpgrade php7-zipUpgrade php5-pspellUpgrade php7-calendarUpgrade php7-ldapUpgrade php7-pearUpgrade php7-sodiumUpgrade php7-opcacheUpgrade php72-socketsUpgrade php7-pdoUpgrade php7-posixUpgrade php72-snmpUpgrade php7-iconvUpgrade apache2-mod_php5Upgrade apache2-mod_php7Upgrade php5-opcacheUpgrade php7-mbstringUpgrade php7-tidyUpgrade php7-ftpUpgrade php7-sysvmsgUpgrade php5-gmpUpgrade php7-bcmathUpgrade php7-intlUpgrade php5-develUpgrade php7-socketsUpgrade php72-imapUpgrade php72-fastcgiUpgrade php7-pharUpgrade php72-sysvmsgUpgrade php72-opcacheUpgrade php72-iconvUpgrade php72-fpmUpgrade php5-sysvsemUpgrade php72-xmlrpcUpgrade php5-jsonUpgrade php72-mysqlUpgrade php7-enchantUpgrade php5-exifUpgrade tidyUpgrade php72-ftpUpgrade php7-wddxUpgrade php7-pear-archive_tarUpgrade php7-zlibUpgrade php72-tidyUpgrade php7-pgsqlUpgrade php7-bz2Upgrade php5-xmlreaderUpgrade php7-embedUpgrade php5-pdoUpgrade php7-xmlwriterUpgrade php72-pspellUpgrade libtidy-develUpgrade php72-gettextUpgrade php7-curlUpgrade php7-snmpUpgrade tidy-docUpgrade php72-curlUpgrade php72-bcmathUpgrade php5-wddxUpgrade php72-xmlreaderUpgrade php5-opensslUpgrade php5-xmlwriterUpgrade php72Upgrade php7-gdUpgrade php72-xmlwriterUpgrade php7-xmlreaderUpgrade php72-ctypeUpgrade php5-imapUpgrade php72-sysvsemUpgrade php5-xslUpgrade php7-tokenizerUpgrade php72-readlineUpgrade php72-gmpUpgrade php7-fpmUpgrade php7-exifUpgrade php7-soapUpgrade php72-pear-archive_tarUpgrade php72-sodiumUpgrade php5-xmlrpcUpgrade php7Upgrade php7-shmopUpgrade php5-mbstringUpgrade php5-ctypeUpgrade php7-gettextUpgrade php7-domUpgrade php72-zlibUpgrade php72-odbcUpgrade php5-pcntlUpgrade php5-ftpUpgrade php5-fastcgiUpgrade php5-mcryptUpgrade php5-zipUpgrade php72-pgsqlUpgrade php7-sqliteUpgrade php72-soapUpgrade php5Upgrade php5-mysqlUpgrade php7-gmpUpgrade php5-gettextUpgrade php72-exifUpgrade php5-phar | May 10, 2020 | Apr 1, 2020 |
| Ubuntu | — | Upgrade libapache2-mod-php7.3Upgrade libapache2-mod-php7.4Upgrade php7.4-cgiUpgrade php7.4-fpmUpgrade php5-cgiUpgrade php7.2-cgiUpgrade php7.4-cliUpgrade libapache2-mod-php7.0Upgrade php7.3-fpmUpgrade php7.2Upgrade php7.3-cgiUpgrade php5-fpmUpgrade php7.4-mbstringUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cli (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-cliUpgrade php7.0-cliUpgrade php7.2-fpmUpgrade libapache2-mod-php5Upgrade php7.3-mbstringUpgrade php7.0-fpmUpgrade php5-cliUpgrade php7.0-cgiUpgrade php7.2-cli | Apr 16, 2020 | Apr 1, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub