In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-opcacheUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-pearUpgrade apcu-panelUpgrade php-mysqlndUpgrade php-cliUpgrade php-embeddedUpgrade php-ffiUpgrade phpUpgrade php-xmlUpgrade php-snmpUpgrade libzipUpgrade php-processUpgrade php-pecl-xdebugUpgrade libzip-develUpgrade php-pecl-xdebug3Upgrade php-fpmUpgrade php-jsonUpgrade php-gmpUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-soapUpgrade php-ldapUpgrade php-commonUpgrade php-develUpgrade php-intlUpgrade php-mbstringUpgrade php-dbgUpgrade php-dbaUpgrade php-odbc | Feb 22, 2023 | Nov 14, 2022 |
| Alpine Linux | — | Upgrade php81Upgrade php8Upgrade php82Upgrade php7 | Aug 22, 2024 | Nov 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-embeddedUpgrade php-gdUpgrade php-pdoUpgrade php-bcmathUpgrade phpUpgrade php-ldapUpgrade php-processUpgrade php-fpmUpgrade php-soapUpgrade php-dbaUpgrade php-gmpUpgrade php-pspellUpgrade php-enchantUpgrade php-develUpgrade php-sodiumUpgrade php-odbcUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-snmpUpgrade php-commonUpgrade php-opcacheUpgrade php-intlUpgrade php-xmlUpgrade php-cliUpgrade php-dbgUpgrade php-debuginfoUpgrade php-mysqlnd | Sep 14, 2023 | Nov 14, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-opcacheUpgrade php8.1-pdo-debuginfoUpgrade php8.1-develUpgrade php8.1-fpmUpgrade php8.1-common-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-ldapUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-processUpgrade php8.1-dba-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-soapUpgrade php8.1-mbstringUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-xmlUpgrade php8.1-embeddedUpgrade php8.1-gmpUpgrade php8.1-pgsqlUpgrade php8.1-pdoUpgrade php8.1-intl-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-ffiUpgrade php8.1-xml-debuginfoUpgrade php8.1-opcache-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-ffi-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-gdUpgrade php8.1-dbgUpgrade php8.1-enchantUpgrade php8.1-tidyUpgrade php8.1-ldap-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-dbaUpgrade php8.1-cliUpgrade php8.1-bcmathUpgrade php8.1Upgrade php8.1-odbc-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-process-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-odbcUpgrade php8.1-fpm-debuginfoUpgrade php8.1-intlUpgrade php8.1-common | Feb 17, 2025 | Oct 27, 2022 |
| Centos_linux | — | Upgrade php-xmlUpgrade php-pearUpgrade php-pecl-rrd-debuginfoUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-tools-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebug3-debugsourceUpgrade php-develUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-debuginfoUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug3-debuginfoUpgrade php-commonUpgrade php-snmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade php-processUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3Upgrade php-dbaUpgrade php-gmp-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade phpUpgrade php-ffi-debuginfoUpgrade php-ldapUpgrade php-ffiUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debugsourceUpgrade php-fpm-debuginfoUpgrade php-embedded-debuginfoUpgrade php-intlUpgrade php-json-debuginfoUpgrade php-snmpUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-cliUpgrade php-bcmathUpgrade libzipUpgrade libzip-develUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-cli-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade libzip-toolsUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-ldap-debuginfoUpgrade apcu-panelUpgrade php-process-debuginfoUpgrade php-debugsourceUpgrade libzip-debuginfoUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-mysqlndUpgrade php-mbstring-debuginfo | Feb 22, 2023 | Nov 14, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Nov 14, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Nov 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-recodeUpgrade php-soapUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade phpUpgrade php-ldapUpgrade php-commonUpgrade php-cliUpgrade php-fpmUpgrade php-xmlUpgrade php-pdoUpgrade php-odbc | Feb 9, 2023 | Nov 14, 2022 |
| Oracle_linux | — | Upgrade php-jsonUpgrade php-pecl-rrdUpgrade php-processUpgrade php-pdoUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-pearUpgrade php-fpmUpgrade php-gmpUpgrade php-pecl-xdebug3Upgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-pgsqlUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-ffiUpgrade php-soapUpgrade php-snmpUpgrade php-cliUpgrade php-odbcUpgrade php-bcmathUpgrade php-dbaUpgrade php-intlUpgrade php-ldapUpgrade libzip-toolsUpgrade php-opcacheUpgrade libzip-develUpgrade php-pecl-apcuUpgrade libzipUpgrade php-dbgUpgrade php-commonUpgrade phpUpgrade php-enchant | Feb 23, 2023 | Oct 27, 2022 |
| Php | — | Upgrade to PHP version 7.4.33Upgrade to PHP version 8.0.25Upgrade to PHP version 8.1.12 | Jan 17, 2023 | Nov 14, 2022 |
| Redhat_linux | — | Upgrade php-pgsqlUpgrade libzip-toolsUpgrade php-gd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade php-pecl-apcu-debuginfoUpgrade libzipUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-develUpgrade php-processUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrdUpgrade php-fpm-debuginfoUpgrade php-pdoUpgrade libzip-debuginfoUpgrade php-gmpUpgrade php-intl-debuginfoUpgrade php-dba-debuginfoUpgrade php-opcache-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-dbaUpgrade apcu-panelUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-enchantUpgrade php-ffiUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pdo-debuginfoUpgrade php-ldap-debuginfoUpgrade php-jsonUpgrade php-pecl-zipUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-cli-debuginfoUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-embedded-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debugsourceUpgrade php-xmlUpgrade php-pearUpgrade php-ffi-debuginfoUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-pecl-rrd-debuginfoUpgrade php-odbcUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-fpmUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-common-debuginfoUpgrade libzip-develUpgrade php-enchant-debuginfoUpgrade phpUpgrade php-pecl-xdebug3Upgrade php-commonUpgrade php-cliUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-snmp | Feb 22, 2023 | Nov 14, 2022 |
| Rocky_linux | — | Upgrade libzip-toolsUpgrade php-mbstringUpgrade php-pecl-apcuUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-odbcUpgrade php-fpm-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-xdebug3Upgrade php-ldap-debuginfoUpgrade php-common-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-cli-debuginfoUpgrade php-debuginfoUpgrade php-pecl-xdebugUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-commonUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-intl-debuginfoUpgrade php-ffiUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-ldapUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-mysqlndUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-embeddedUpgrade php-debugsourceUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-develUpgrade php-jsonUpgrade php-intlUpgrade phpUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade php-processUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-rrdUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-opcacheUpgrade php-ffi-debuginfoUpgrade php-cliUpgrade libzip-develUpgrade php-pgsql-debuginfoUpgrade libzip-debugsourceUpgrade php-gmpUpgrade php-enchantUpgrade php-develUpgrade php-xml | Mar 12, 2024 | Nov 14, 2022 |
| Suse | — | Upgrade php74-sqliteUpgrade php8-ctypeUpgrade php8-gettextUpgrade php7-mbstringUpgrade php8-gmpUpgrade php74-socketsUpgrade php8-bz2Upgrade apache2-mod_php8Upgrade php74-posixUpgrade php7-develUpgrade php74-odbcUpgrade apache2-mod_php7Upgrade php8-intlUpgrade php8-mbstringUpgrade php8Upgrade php7-ftpUpgrade php74-shmopUpgrade php7-bcmathUpgrade php7-bz2Upgrade php7-testUpgrade php74-mbstringUpgrade php8-soapUpgrade php8-gdUpgrade php8-sodiumUpgrade php74Upgrade php74-intlUpgrade php7-pharUpgrade php8-enchantUpgrade php7-jsonUpgrade php8-pgsqlUpgrade php7-readlineUpgrade php8-sqliteUpgrade php8-curlUpgrade php74-iconvUpgrade php7-gettextUpgrade php7-pdoUpgrade php8-readlineUpgrade php7-mysqlUpgrade php7-posixUpgrade php7-ldapUpgrade php74-pcntlUpgrade php8-domUpgrade php7-calendarUpgrade php7-sqliteUpgrade php8-testUpgrade php8-xmlwriterUpgrade php8-sysvsemUpgrade php74-mysqlUpgrade php7-sysvsemUpgrade php74-ldapUpgrade php74-pharUpgrade php7-pgsqlUpgrade php7-soapUpgrade php7-sysvmsgUpgrade php8-pdoUpgrade php7-sysvshmUpgrade php74-fastcgiUpgrade php8-sysvshmUpgrade php8-shmopUpgrade php7-shmopUpgrade php74-domUpgrade php7-odbcUpgrade php8-bcmathUpgrade php74-tidyUpgrade php7-socketsUpgrade php74-dbaUpgrade php8-fpmUpgrade php8-calendarUpgrade php74-pdoUpgrade php7-zlibUpgrade php74-bcmathUpgrade php74-sodiumUpgrade php7-tokenizerUpgrade php7-cliUpgrade php7-dbaUpgrade php8-pharUpgrade php7-fileinfoUpgrade php7-sodiumUpgrade php74-sysvsemUpgrade php74-fileinfoUpgrade php7-exifUpgrade php7-gdUpgrade php7-domUpgrade php7-snmpUpgrade php8-ldapUpgrade php74-soapUpgrade php7-zipUpgrade php74-xmlreaderUpgrade php7Upgrade php8-xmlreaderUpgrade php8-iconvUpgrade php74-gettextUpgrade php8-exifUpgrade php74-gdUpgrade php74-enchantUpgrade php8-cliUpgrade php74-ftpUpgrade php7-embedUpgrade php8-embedUpgrade php74-ctypeUpgrade php74-tokenizerUpgrade php8-fileinfoUpgrade php7-opensslUpgrade php8-tidyUpgrade php74-calendarUpgrade php8-socketsUpgrade php74-curlUpgrade php8-mysqlUpgrade php8-dbaUpgrade php74-opensslUpgrade php74-zlibUpgrade php74-opcacheUpgrade php7-xmlwriterUpgrade php8-snmpUpgrade php74-gmpUpgrade php7-xmlrpcUpgrade php7-iconvUpgrade php7-enchantUpgrade php7-fpmUpgrade php7-fastcgiUpgrade php7-opcacheUpgrade php74-bz2Upgrade php74-sysvshmUpgrade php74-snmpUpgrade php8-tokenizerUpgrade php8-odbcUpgrade php74-xslUpgrade php74-xmlwriterUpgrade php7-firebirdUpgrade php7-gmpUpgrade php7-tidyUpgrade php74-zipUpgrade php8-develUpgrade php74-pgsqlUpgrade php74-develUpgrade php7-ctypeUpgrade php8-opcacheUpgrade php8-sysvmsgUpgrade php8-posixUpgrade php8-ftpUpgrade php8-fastcgiUpgrade php74-sysvmsgUpgrade php74-exifUpgrade php7-xmlreaderUpgrade php7-intlUpgrade php8-zipUpgrade php8-xslUpgrade php7-curlUpgrade php74-fpmUpgrade php7-pcntlUpgrade php74-jsonUpgrade php7-xslUpgrade php74-readlineUpgrade php8-pcntlUpgrade apache2-mod_php74Upgrade php8-zlibUpgrade php8-opensslUpgrade php74-xmlrpc | Nov 16, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade php7.4Upgrade php7.4-cgiUpgrade libapache2-mod-php7.4Upgrade php7.4-zipUpgrade libapache2-mod-php8.0Upgrade php8.1-cgiUpgrade libapache2-mod-php8.1Upgrade php8.1-cliUpgrade php7.4-cliUpgrade php8.1-zipUpgrade php8.1 | Nov 9, 2022 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub