In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-jsonUpgrade libzipUpgrade php-pdoUpgrade php-mbstringUpgrade php-bcmathUpgrade php-processUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-odbcUpgrade php-pgsqlUpgrade php-ldapUpgrade php-develUpgrade php-dbaUpgrade php-gmpUpgrade libzip-toolsUpgrade php-opcacheUpgrade apcu-panelUpgrade php-intlUpgrade php-recodeUpgrade php-pearUpgrade php-cliUpgrade php-dbgUpgrade php-xmlUpgrade phpUpgrade php-mysqlndUpgrade php-snmpUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-common | May 4, 2022 | Apr 1, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Apr 1, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | May 15, 2020 | Apr 1, 2020 |
| Centos_linux | — | Upgrade php-ldap-debuginfoUpgrade php-process-debuginfoUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-soapUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade php-snmp-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-develUpgrade php-odbc-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-soap-debuginfoUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-embedded-debuginfoUpgrade php-processUpgrade apcu-panelUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-bcmath-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-zip-debugsourceUpgrade php-fpmUpgrade php-mysqlndUpgrade php-pecl-zip-debuginfoUpgrade php-debugsourceUpgrade libzipUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-ldapUpgrade php-json-debuginfoUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-gmp-debuginfoUpgrade php-pearUpgrade php-cliUpgrade php-odbcUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php-recodeUpgrade php-jsonUpgrade php-enchant-debuginfoUpgrade php-pdoUpgrade php-gmpUpgrade phpUpgrade php-snmpUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-develUpgrade php-commonUpgrade php-gd-debuginfoUpgrade php-recode-debuginfo | Sep 9, 2020 | Apr 1, 2020 |
| Debian | — | Upgrade php7.4 | Apr 28, 2020 | Apr 1, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Mar 27, 2020 | Mar 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pdoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-commonUpgrade php-soapUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-recodeUpgrade php-processUpgrade phpUpgrade php-cliUpgrade php-ldapUpgrade php-xml | Sep 28, 2020 | Apr 1, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-ldapUpgrade php-odbcUpgrade php-soapUpgrade php-commonUpgrade phpUpgrade php-gdUpgrade php-processUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-pdoUpgrade php-recodeUpgrade php-cliUpgrade php-fpm | May 27, 2020 | Apr 1, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.5-11.4.22.0.1.69.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.17-11.4.22.0.1.69.2 on Solaris 11.4 | Jan 19, 2021 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade php-commonUpgrade php-jsonUpgrade php-intlUpgrade phpUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-odbcUpgrade php-dbgUpgrade php-soapUpgrade php-ldapUpgrade php-gmpUpgrade php-pecl-apcuUpgrade libzip-toolsUpgrade php-bcmathUpgrade php-dbaUpgrade apcu-panelUpgrade php-xmlUpgrade libzip-develUpgrade php-cliUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-pearUpgrade php-mysqlndUpgrade php-embeddedUpgrade libzipUpgrade php-gdUpgrade php-develUpgrade php-pdoUpgrade php-enchantUpgrade php-opcacheUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-snmpUpgrade php-recodeUpgrade php-pecl-rrd | Sep 10, 2020 | Apr 1, 2020 |
| Php | — | Upgrade to PHP version 7.2.9Upgrade to PHP version 7.4.4Upgrade to PHP version 7.3.16 | Apr 6, 2020 | Apr 1, 2020 |
| Redhat_linux | — | Upgrade php-pgsql-debuginfoUpgrade php-soap-debuginfoUpgrade php-snmpUpgrade php-opcacheUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade libzip-toolsUpgrade php-cliUpgrade php-pecl-rrd-debugsourceUpgrade php-debuginfoUpgrade php-enchant-debuginfoUpgrade php-recodeNo solution existsUpgrade php-pecl-apcuUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-fpmUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pearUpgrade phpUpgrade libzip-develUpgrade php-recode-debuginfoUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-ldapUpgrade php-pdoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade php-soapUpgrade php-develUpgrade php-processUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade php-jsonUpgrade php-gdUpgrade php-intlUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-gmpUpgrade php-fpm-debuginfoUpgrade php-bcmathUpgrade php-gd-debuginfoUpgrade php-pecl-zipUpgrade php-snmp-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade libzip-debuginfoUpgrade libzipUpgrade php-ldap-debuginfoUpgrade php-odbcUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfo | Sep 9, 2020 | Apr 1, 2020 |
| Rocky_linux | — | Upgrade php-recodeUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-apcu-develUpgrade php-enchantUpgrade php-dbg-debuginfoUpgrade libzip-debugsourceUpgrade php-dbaUpgrade php-intl-debuginfoUpgrade php-soap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-mbstringUpgrade php-pgsql-debuginfoUpgrade libzip-develUpgrade php-snmp-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-embedded-debuginfoUpgrade php-commonUpgrade phpUpgrade php-recode-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-common-debuginfoUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade libzip-debuginfoUpgrade php-xmlUpgrade php-snmpUpgrade php-develUpgrade php-pgsqlUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-dbgUpgrade php-pecl-xdebug-debugsourceUpgrade php-pdoUpgrade php-cliUpgrade php-xml-debuginfoUpgrade php-intlUpgrade php-gmpUpgrade php-opcacheUpgrade php-json-debuginfoUpgrade php-fpm-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-enchant-debuginfoUpgrade php-ldapUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pecl-apcu-debugsource | Mar 12, 2024 | Apr 1, 2020 |
| Suse | — | Upgrade php7Upgrade php72-xmlreaderUpgrade php7-embedUpgrade php7-mbstringUpgrade php7-ftpUpgrade php72-socketsUpgrade php72-xmlrpcUpgrade php72-mysqlUpgrade php72-zlibUpgrade php5-xslUpgrade php7-soapUpgrade php72-gettextUpgrade php7-gettextUpgrade php72-gmpUpgrade php72-sysvsemUpgrade php7-snmpUpgrade php5-imapUpgrade php7-fpmUpgrade php72-pspellUpgrade php72-odbcUpgrade php7-gdUpgrade php5-xmlwriterUpgrade php72-pgsqlUpgrade php5-mysqlUpgrade php72Upgrade php5Upgrade php72-exifUpgrade php5-zipUpgrade php72-soapUpgrade php7-sysvmsgUpgrade php7-exifUpgrade php7-xmlreaderUpgrade php5-xmlreaderUpgrade php5-gmpUpgrade php5-opensslUpgrade php5-gettextUpgrade php5-mcryptUpgrade php5-ftpUpgrade php72-pear-archive_tarUpgrade php7-domUpgrade php7-tidyUpgrade php7-sqliteUpgrade tidy-docUpgrade php72-curlUpgrade php7-gmpUpgrade php5-wddxUpgrade php5-xmlrpcUpgrade php7-pgsqlUpgrade php7-zlibUpgrade php72-ftpUpgrade php72-tidyUpgrade php7-pear-archive_tarUpgrade php7-shmopUpgrade php72-imapUpgrade php72-sodiumUpgrade php7-intlUpgrade tidyUpgrade php7-socketsUpgrade php5-develUpgrade php5-pharUpgrade apache2-mod_php5Upgrade php5-pdoUpgrade php7-xmlwriterUpgrade php72-iconvUpgrade php72-bcmathUpgrade php7-curlUpgrade php72-fastcgiUpgrade php7-posixUpgrade php7-wddxUpgrade php7-iconvUpgrade php72-ctypeUpgrade php5-sysvsemUpgrade php5-opcacheUpgrade php7-bz2Upgrade apache2-mod_php7Upgrade php5-ctypeUpgrade php7-pharUpgrade php7-bcmathUpgrade php72-opcacheUpgrade php7-tokenizerUpgrade libtidy-develUpgrade php72-sysvmsgUpgrade php7-enchantUpgrade php72-snmpUpgrade php5-mbstringUpgrade php72-xmlwriterUpgrade php5-fastcgiUpgrade php5-jsonUpgrade php5-exifUpgrade php7-pdoUpgrade php72-readlineUpgrade php72-fpmUpgrade php5-pcntlUpgrade php5-sysvmsgUpgrade php72-ldapUpgrade php5-ldapUpgrade php5-iconvUpgrade php7-calendarUpgrade php5-curlUpgrade php5-calendarUpgrade php72-pearUpgrade php7-mysqlUpgrade php7-ldapUpgrade php72-bz2Upgrade php5-pgsqlUpgrade php5-fileinfoUpgrade php7-sodiumUpgrade php7-dbaUpgrade php7-readlineUpgrade php5-pearUpgrade php7-fileinfoUpgrade php5-sysvshmUpgrade php7-sysvshmUpgrade php5-domUpgrade php5-socketsUpgrade php72-sysvshmUpgrade php5-posixUpgrade php7-sysvsemUpgrade php5-tokenizerUpgrade php72-posixUpgrade php72-gdUpgrade php72-dbaUpgrade php5-odbcUpgrade php5-dbaUpgrade php7-testUpgrade php5-suhosinUpgrade php5-bcmathUpgrade php5-snmpUpgrade php72-develUpgrade php7-xmlrpcUpgrade php7-opensslUpgrade php72-domUpgrade php72-pcntlUpgrade php5-zlibUpgrade php7-firebirdUpgrade php7-odbcUpgrade php5-gdUpgrade php7-pcntlUpgrade libtidy5Upgrade php7-fastcgiUpgrade php5-shmopUpgrade php5-intlUpgrade php5-fpmUpgrade php72-xslUpgrade php72-tokenizerUpgrade php72-pdoUpgrade php72-jsonUpgrade php7-zipUpgrade php72-intlUpgrade php7-xslUpgrade php7-develUpgrade php7-ctypeUpgrade php5-soapUpgrade php5-bz2Upgrade php72-opensslUpgrade php72-zipUpgrade php72-pharUpgrade php72-wddxUpgrade php7-jsonUpgrade php5-pspellUpgrade php72-shmopUpgrade php7-opcacheUpgrade php72-calendarUpgrade php72-enchantUpgrade apache2-mod_php72Upgrade php7-pearUpgrade php5-sqliteUpgrade php72-fileinfoUpgrade php72-mbstringUpgrade php5-enchantUpgrade php72-sqlite | May 10, 2020 | Apr 1, 2020 |
| Ubuntu | — | Upgrade php7.4-cliUpgrade php5-fpmUpgrade php7.3-fpmUpgrade php5-cgiUpgrade libapache2-mod-php7.3Upgrade libapache2-mod-php7.0Upgrade php7.4-fpmUpgrade php7.4-cgiUpgrade php7.3-cgiUpgrade libapache2-mod-php7.4Upgrade php7.2Upgrade php7.2-cgiUpgrade libapache2-mod-php5Upgrade php5-cli (Ubuntu Pro)Upgrade php7.0-cliUpgrade php5-cliUpgrade php7.4-mbstringUpgrade libapache2-mod-php7.2Upgrade php7.0-cgiUpgrade php7.2-cliUpgrade libapache2-mod-php5 (Ubuntu Pro)Upgrade php5-cgi (Ubuntu Pro)Upgrade php7.0-fpmUpgrade php7.3-cliUpgrade php7.2-fpmUpgrade php5-fpm (Ubuntu Pro)Upgrade php7.3-mbstring | Apr 16, 2020 | Apr 1, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub