In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-xmlrpcUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-xmlUpgrade libzip-toolsUpgrade php-opcacheUpgrade apcu-panelUpgrade phpUpgrade libzip-develUpgrade libzipUpgrade php-mysqlndUpgrade php-processUpgrade php-enchantUpgrade php-ffiUpgrade php-embeddedUpgrade php-cliUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-fpmUpgrade php-intlUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-develUpgrade php-commonUpgrade php-dbgUpgrade php-ldapUpgrade php-bcmathUpgrade php-pdoUpgrade php-pecl-zipUpgrade php-soapUpgrade php-pgsqlUpgrade php-gmpUpgrade php-jsonUpgrade php-gdUpgrade php-mbstring | Feb 22, 2023 | Nov 14, 2022 |
| Alpine Linux | — | Upgrade php81Upgrade php82Upgrade php8Upgrade php7 | Aug 22, 2024 | Nov 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-pgsqlUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-dbgUpgrade php-intlUpgrade php-commonUpgrade php-mbstringUpgrade php-cliUpgrade php-odbcUpgrade php-sodiumUpgrade php-mysqlndUpgrade php-xmlUpgrade php-snmpUpgrade php-develUpgrade php-fpmUpgrade php-dbaUpgrade phpUpgrade php-pdoUpgrade php-enchantUpgrade php-processUpgrade php-ldapUpgrade php-gmpUpgrade php-embeddedUpgrade php-bcmathUpgrade php-gdUpgrade php-pspellUpgrade php-soap | Sep 14, 2023 | Nov 14, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-ffi-debuginfoUpgrade php8.1-odbcUpgrade php8.1-dbaUpgrade php8.1-soap-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-gdUpgrade php8.1-intlUpgrade php8.1-process-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-tidyUpgrade php8.1-fpm-debuginfoUpgrade php8.1-commonUpgrade php8.1-cliUpgrade php8.1Upgrade php8.1-bcmathUpgrade php8.1-debugsourceUpgrade php8.1-gd-debuginfoUpgrade php8.1-dbgUpgrade php8.1-enchantUpgrade php8.1-opcache-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-odbc-debuginfoUpgrade php8.1-ldap-debuginfoUpgrade php8.1-ffiUpgrade php8.1-dbg-debuginfoUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-fpmUpgrade php8.1-enchant-debuginfoUpgrade php8.1-xmlUpgrade php8.1-embeddedUpgrade php8.1-dba-debuginfoUpgrade php8.1-ldapUpgrade php8.1-mbstringUpgrade php8.1-cli-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-gmpUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-processUpgrade php8.1-soapUpgrade php8.1-pgsqlUpgrade php8.1-pdoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-develUpgrade php8.1-common-debuginfoUpgrade php8.1-bcmath-debuginfo | Feb 17, 2025 | Oct 27, 2022 |
| Centos_linux | — | Upgrade apcu-panelUpgrade php-json-debuginfoUpgrade php-process-debuginfoUpgrade libzipUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade php-bcmathUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-embedded-debuginfoUpgrade php-fpm-debuginfoUpgrade php-cliUpgrade php-gmp-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade libzip-debugsourceUpgrade php-ffiUpgrade libzip-develUpgrade php-debugsourceUpgrade php-intlUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade phpUpgrade php-ldap-debuginfoUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade php-embeddedUpgrade php-dbgUpgrade php-enchantUpgrade php-gdUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pearUpgrade php-pgsqlUpgrade php-pdoUpgrade php-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-xdebug3-debugsourceUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-dba-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-commonUpgrade php-pecl-xdebugUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-develUpgrade php-pecl-xdebug3-debuginfo | Feb 22, 2023 | Nov 14, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Nov 14, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Nov 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-soapUpgrade php-processUpgrade php-gdUpgrade php-xmlrpcUpgrade php-cliUpgrade php-fpmUpgrade php-xmlUpgrade php-pdoUpgrade php-ldapUpgrade php-odbcUpgrade php-commonUpgrade php | Feb 9, 2023 | Nov 14, 2022 |
| Oracle_linux | — | Upgrade libzipUpgrade php-cliUpgrade php-embeddedUpgrade php-ffiUpgrade php-snmpUpgrade libzip-toolsUpgrade phpUpgrade php-commonUpgrade php-dbgUpgrade php-dbaUpgrade libzip-develUpgrade php-intlUpgrade php-ldapUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-pecl-apcuUpgrade php-enchantUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-soapUpgrade php-odbcUpgrade php-bcmathUpgrade php-mbstringUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug3Upgrade php-fpmUpgrade php-develUpgrade php-pdoUpgrade php-processUpgrade php-pecl-rrdUpgrade php-pearUpgrade php-gmpUpgrade php-gdUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-json | Feb 23, 2023 | Oct 27, 2022 |
| Php | — | Upgrade to PHP version 8.1.12Upgrade to PHP version 7.4.33Upgrade to PHP version 8.0.25 | Jan 17, 2023 | Nov 14, 2022 |
| Redhat_linux | — | Upgrade php-dbaUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade apcu-panelUpgrade php-xml-debuginfoUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-debuginfoUpgrade libzip-toolsUpgrade php-jsonUpgrade php-json-debuginfoUpgrade php-snmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-rrdUpgrade php-xmlrpc-debuginfoUpgrade php-gd-debuginfoUpgrade php-mbstringUpgrade php-pdoUpgrade libzipUpgrade php-pgsqlUpgrade php-ffiUpgrade php-gdUpgrade php-embedded-debuginfoUpgrade php-gmpUpgrade php-pecl-apcu-debugsourceUpgrade php-gmp-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dbg-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-intlUpgrade php-soapUpgrade php-pgsql-debuginfoUpgrade php-processUpgrade php-pecl-xdebugUpgrade php-debuginfoUpgrade php-xmlUpgrade php-commonUpgrade phpUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug3Upgrade php-bcmathUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-ffi-debuginfoUpgrade php-dbgUpgrade php-pearUpgrade php-cliUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-opcacheUpgrade libzip-develUpgrade php-odbcUpgrade php-ldapUpgrade php-develUpgrade php-pecl-xdebug-debugsourceUpgrade php-enchant-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-zip-debuginfo | Feb 22, 2023 | Nov 14, 2022 |
| Rocky_linux | — | Upgrade php-mbstringUpgrade php-pgsqlUpgrade php-pecl-xdebug3Upgrade php-pecl-apcuUpgrade php-ldap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-json-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-toolsUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-common-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-snmpUpgrade libzipUpgrade php-cliUpgrade libzip-develUpgrade php-intlUpgrade php-soapUpgrade php-opcacheUpgrade php-ffi-debuginfoUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade phpUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade php-ffiUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-bcmathUpgrade php-pecl-xdebug3-debugsourceUpgrade php-ldapUpgrade php-fpmUpgrade php-embeddedUpgrade php-gmpUpgrade php-enchantUpgrade php-develUpgrade libzip-debugsourceUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbaUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zipUpgrade php-process-debuginfoUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-debugsourceUpgrade php-processUpgrade php-pecl-xdebug-debuginfoUpgrade php-snmp-debuginfoUpgrade php-gd-debuginfo | Mar 12, 2024 | Nov 14, 2022 |
| Suse | — | Upgrade php74-pcntlUpgrade php8-xmlwriterUpgrade php8-sysvsemUpgrade php74-domUpgrade php8-testUpgrade php7-ftpUpgrade php74-pharUpgrade apache2-mod_php7Upgrade php74-tidyUpgrade php7-dbaUpgrade php8-mbstringUpgrade php7-develUpgrade php8-calendarUpgrade php74-posixUpgrade php8-sqliteUpgrade php74-dbaUpgrade php7-odbcUpgrade php7-sqliteUpgrade php74-sodiumUpgrade php7-pgsqlUpgrade php8-ctypeUpgrade php8-gettextUpgrade php8-pdoUpgrade php7-ldapUpgrade php7-jsonUpgrade php7-posixUpgrade php74-socketsUpgrade php8-sysvshmUpgrade php8-intlUpgrade php8-soapUpgrade php7-socketsUpgrade apache2-mod_php8Upgrade php7-tokenizerUpgrade php7-testUpgrade php7-bz2Upgrade php7-mbstringUpgrade php8-pgsqlUpgrade php8-bz2Upgrade php7-shmopUpgrade php74-bcmathUpgrade php7-readlineUpgrade php7-sysvmsgUpgrade php74-fastcgiUpgrade php7-bcmathUpgrade php7-mysqlUpgrade php74-mysqlUpgrade php74-ldapUpgrade php8-curlUpgrade php7-soapUpgrade php7-calendarUpgrade php74-sqliteUpgrade php7-pharUpgrade php7-zlibUpgrade php7-sysvshmUpgrade php8-domUpgrade php74-iconvUpgrade php74Upgrade php8-sodiumUpgrade php74-odbcUpgrade php8-enchantUpgrade php74-shmopUpgrade php74-intlUpgrade php8-gdUpgrade php8-gmpUpgrade php8-readlineUpgrade php7-sysvsemUpgrade php8-bcmathUpgrade php7-pdoUpgrade php74-mbstringUpgrade php8Upgrade php74-pdoUpgrade php8-fpmUpgrade php8-pharUpgrade php7-gettextUpgrade php7-cliUpgrade php8-shmopUpgrade php7-pcntlUpgrade php8-develUpgrade php74-pgsqlUpgrade php8-odbcUpgrade php74-soapUpgrade php74-xmlreaderUpgrade php8-xmlreaderUpgrade php7-zipUpgrade php8-sysvmsgUpgrade php7-tidyUpgrade php8-tokenizerUpgrade php74-bz2Upgrade php8-ldapUpgrade php74-exifUpgrade php7-enchantUpgrade php74-opensslUpgrade php7-snmpUpgrade php8-snmpUpgrade php74-develUpgrade php7-xmlrpcUpgrade php7-iconvUpgrade php8-posixUpgrade php7-exifUpgrade php74-calendarUpgrade php74-xmlrpcUpgrade php7-opensslUpgrade php74-tokenizerUpgrade php7-domUpgrade php8-opensslUpgrade php74-sysvsemUpgrade php8-dbaUpgrade php74-enchantUpgrade php74-curlUpgrade php74-ctypeUpgrade php7-embedUpgrade php74-ftpUpgrade php8-cliUpgrade php8-tidyUpgrade php8-socketsUpgrade php8-mysqlUpgrade php8-fileinfoUpgrade php8-embedUpgrade php74-gdUpgrade php8-pcntlUpgrade php8-zlibUpgrade php74-readlineUpgrade php7-gdUpgrade php7-sodiumUpgrade apache2-mod_php74Upgrade php7-xslUpgrade php8-opcacheUpgrade php7-opcacheUpgrade php74-sysvmsgUpgrade php7-fastcgiUpgrade php7-intlUpgrade php8-zipUpgrade php74-snmpUpgrade php74-zipUpgrade php8-exifUpgrade php8-ftpUpgrade php74-gmpUpgrade php74-gettextUpgrade php7Upgrade php74-opcacheUpgrade php8-iconvUpgrade php74-zlibUpgrade php74-sysvshmUpgrade php74-xslUpgrade php74-jsonUpgrade php74-xmlwriterUpgrade php7-gmpUpgrade php7-fpmUpgrade php7-firebirdUpgrade php74-fpmUpgrade php8-fastcgiUpgrade php7-xmlreaderUpgrade php8-xslUpgrade php7-xmlwriterUpgrade php7-fileinfoUpgrade php7-ctypeUpgrade php7-curlUpgrade php74-fileinfo | Nov 16, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade php8.1-cgiUpgrade php7.4-cliUpgrade php8.1Upgrade php8.1-cliUpgrade libapache2-mod-php8.1Upgrade php8.1-zipUpgrade php7.4-cgiUpgrade php7.4-zipUpgrade libapache2-mod-php8.0Upgrade libapache2-mod-php7.4Upgrade php7.4 | Nov 9, 2022 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub