In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-enchantUpgrade php-pecl-apcuUpgrade phpUpgrade php-xmlUpgrade php-xmlrpcUpgrade php-opcacheUpgrade php-fpmUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebugUpgrade php-processUpgrade php-cliUpgrade php-snmpUpgrade php-embeddedUpgrade php-ffiUpgrade libzipUpgrade apcu-panelUpgrade php-pearUpgrade libzip-develUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-intlUpgrade php-commonUpgrade php-dbaUpgrade php-pgsqlUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-pecl-rrdUpgrade php-dbgUpgrade php-pdoUpgrade php-gdUpgrade php-ldapUpgrade php-mbstringUpgrade php-bcmathUpgrade php-develUpgrade php-soap | Feb 22, 2023 | Nov 14, 2022 |
| Alpine Linux | — | Upgrade php81Upgrade php8Upgrade php7Upgrade php82 | Aug 22, 2024 | Nov 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-xmlUpgrade php-intlUpgrade php-snmpUpgrade php-mysqlndUpgrade php-sodiumUpgrade php-mbstringUpgrade php-odbcUpgrade php-pgsqlUpgrade php-cliUpgrade php-commonUpgrade php-opcacheUpgrade php-dbgUpgrade php-debuginfoUpgrade php-dbaUpgrade php-pspellUpgrade php-fpmUpgrade php-processUpgrade phpUpgrade php-gdUpgrade php-embeddedUpgrade php-soapUpgrade php-ldapUpgrade php-gmpUpgrade php-pdoUpgrade php-enchantUpgrade php-develUpgrade php-bcmath | Sep 14, 2023 | Nov 14, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-cliUpgrade php8.1-embedded-debuginfoUpgrade php8.1Upgrade php8.1-bcmathUpgrade php8.1-dbgUpgrade php8.1-ldap-debuginfoUpgrade php8.1-tidyUpgrade php8.1-dbaUpgrade php8.1-fpm-debuginfoUpgrade php8.1-enchantUpgrade php8.1-odbc-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-gdUpgrade php8.1-intlUpgrade php8.1-opcache-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-commonUpgrade php8.1-process-debuginfoUpgrade php8.1-debugsourceUpgrade php8.1-mysqlndUpgrade php8.1-odbcUpgrade php8.1-ffiUpgrade php8.1-opcacheUpgrade php8.1-gmpUpgrade php8.1-tidy-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.1-fpmUpgrade php8.1-xmlUpgrade php8.1-pdo-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-processUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-embeddedUpgrade php8.1-pgsqlUpgrade php8.1-pdoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-soapUpgrade php8.1-mbstringUpgrade php8.1-ldapUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-develUpgrade php8.1-common-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-cli-debuginfo | Feb 17, 2025 | Oct 27, 2022 |
| Centos_linux | — | Upgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php-ldap-debuginfoUpgrade phpUpgrade php-debugsourceUpgrade php-embedded-debuginfoUpgrade apcu-panelUpgrade libzip-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-gd-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dbgUpgrade php-snmpUpgrade php-process-debuginfoUpgrade php-bcmathUpgrade php-cliUpgrade libzipUpgrade php-json-debuginfoUpgrade php-opcacheUpgrade php-pecl-zip-debuginfoUpgrade libzip-develUpgrade php-cli-debuginfoUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-gdUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-ffiUpgrade php-dbaUpgrade php-mysqlndUpgrade php-intlUpgrade php-ldapUpgrade php-mbstring-debuginfoUpgrade libzip-toolsUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-embeddedUpgrade php-pecl-zipUpgrade php-ffi-debuginfoUpgrade php-enchantUpgrade php-odbcUpgrade php-pearUpgrade php-xmlUpgrade php-debuginfoUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-pgsqlUpgrade php-pdoUpgrade php-processUpgrade php-mbstringUpgrade php-odbc-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-dbg-debuginfoUpgrade php-gmpUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfo | Feb 22, 2023 | Nov 14, 2022 |
| Debian | — | Upgrade php7.4 | Nov 15, 2022 | Nov 14, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Nov 23, 2022 | Nov 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-xmlrpcUpgrade php-processUpgrade php-recodeUpgrade php-gdUpgrade php-soapUpgrade phpUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-commonUpgrade php-odbcUpgrade php-fpmUpgrade php-pdo | Feb 9, 2023 | Nov 14, 2022 |
| Oracle_linux | — | Upgrade php-xmlrpcUpgrade php-processUpgrade php-xmlUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-gdUpgrade php-jsonUpgrade php-fpmUpgrade php-mbstringUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-gmpUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade phpUpgrade php-ffiUpgrade php-dbgUpgrade php-bcmathUpgrade php-soapUpgrade php-intlUpgrade php-dbaUpgrade php-snmpUpgrade libzipUpgrade php-cliUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-opcacheUpgrade php-ldapUpgrade libzip-toolsUpgrade libzip-develUpgrade php-embeddedUpgrade php-odbcUpgrade php-common | Feb 23, 2023 | Oct 27, 2022 |
| Php | — | Upgrade to PHP version 8.1.12Upgrade to PHP version 7.4.33Upgrade to PHP version 8.0.25 | Jan 17, 2023 | Nov 14, 2022 |
| Redhat_linux | — | Upgrade php-xmlrpc-debuginfoUpgrade php-intlUpgrade libzip-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-fpm-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-intl-debuginfoUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-debugsourceUpgrade php-cli-debuginfoUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-pdoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldap-debuginfoUpgrade libzip-debugsourceUpgrade php-mbstringUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-process-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-embedded-debuginfoUpgrade apcu-panelUpgrade php-dbaUpgrade php-enchantUpgrade php-ffiUpgrade php-dbg-debuginfoUpgrade php-processUpgrade php-pecl-zipUpgrade php-gmpUpgrade php-jsonUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-json-debuginfoUpgrade php-xmlUpgrade php-dbgUpgrade php-pecl-rrd-debuginfoUpgrade libzip-develUpgrade php-develUpgrade php-cliUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-mysqlndUpgrade php-pecl-zip-debuginfoUpgrade php-fpmUpgrade php-pecl-xdebug-debuginfoUpgrade php-pearUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebug3Upgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-commonUpgrade php-pecl-xdebug3-debuginfoUpgrade phpUpgrade php-soap-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-pecl-xdebug-debugsourceUpgrade php-odbcUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-ldapUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-pecl-zip-debugsource | Feb 22, 2023 | Nov 14, 2022 |
| Rocky_linux | — | Upgrade php-dba-debuginfoUpgrade libzip-toolsUpgrade php-intl-debuginfoUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-odbc-debuginfoUpgrade php-cli-debuginfoUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-xdebug3Upgrade php-mbstringUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-debuginfoUpgrade php-pecl-xdebugUpgrade php-json-debuginfoUpgrade php-debugsourceUpgrade php-gmpUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade php-enchantUpgrade libzip-debugsourceUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-snmp-debuginfoUpgrade php-pecl-rrdUpgrade php-xmlrpc-debuginfoUpgrade php-xmlrpcUpgrade php-dbg-debuginfoUpgrade php-process-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-ffi-debuginfoUpgrade php-cliUpgrade php-opcacheUpgrade libzip-develUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-pecl-rrd-debugsourceUpgrade php-jsonUpgrade php-ffiUpgrade libzip-tools-debuginfoUpgrade php-pdoUpgrade php-develUpgrade php-xmlUpgrade php-soapUpgrade php-intlUpgrade php-gmp-debuginfoUpgrade php-gdUpgrade phpUpgrade php-dbaUpgrade php-bcmath-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-mysqlndUpgrade php-ldapUpgrade php-fpm | Mar 12, 2024 | Nov 14, 2022 |
| Suse | — | Upgrade php8-fastcgiUpgrade php8-ftpUpgrade php8-posixUpgrade php74-exifUpgrade php74-sysvmsgUpgrade php8-xslUpgrade php7-zipUpgrade php74-fpmUpgrade php7-intlUpgrade php7-xmlreaderUpgrade php8-zipUpgrade php74-sysvshmUpgrade php74-xmlreaderUpgrade php7-fileinfoUpgrade php8-ldapUpgrade php74-soapUpgrade php7Upgrade php7-fpmUpgrade php74-calendarUpgrade php74-ctypeUpgrade php7-opensslUpgrade php74-curlUpgrade php8-socketsUpgrade php8-tidyUpgrade php7-embedUpgrade php74-enchantUpgrade php8-dbaUpgrade php8-embedUpgrade php8-cliUpgrade php8-fileinfoUpgrade php7-exifUpgrade php74-ftpUpgrade php8-mysqlUpgrade php74-tokenizerUpgrade php74-zipUpgrade php7-curlUpgrade php74-jsonUpgrade php7-pcntlUpgrade php74-xslUpgrade php7-gmpUpgrade php74-fileinfoUpgrade php74-xmlrpcUpgrade php7-fastcgiUpgrade php8-iconvUpgrade php8-develUpgrade php74-gdUpgrade php74-sysvsemUpgrade php7-tidyUpgrade php74-readlineUpgrade php8-opcacheUpgrade php7-gdUpgrade php7-enchantUpgrade php74-develUpgrade php74-gmpUpgrade php74-pgsqlUpgrade php7-xmlrpcUpgrade php74-opensslUpgrade php7-snmpUpgrade php8-exifUpgrade php8-sysvmsgUpgrade php7-iconvUpgrade php8-snmpUpgrade apache2-mod_php74Upgrade php74-xmlwriterUpgrade php8-tokenizerUpgrade php74-snmpUpgrade php7-firebirdUpgrade php74-opcacheUpgrade php8-xmlreaderUpgrade php7-xmlwriterUpgrade php74-bz2Upgrade php74-zlibUpgrade php8-odbcUpgrade php7-opcacheUpgrade php7-xslUpgrade php74-gettextUpgrade php7-ctypeUpgrade php8-zlibUpgrade php8-opensslUpgrade php8-pcntlUpgrade php7-domUpgrade php7-sodiumUpgrade php74-posixUpgrade php7-sysvshmUpgrade php8-gettextUpgrade php8-domUpgrade php7-pgsqlUpgrade php7-bcmathUpgrade php74-pcntlUpgrade php7-bz2Upgrade php7-sysvmsgUpgrade php74-fastcgiUpgrade php8-ctypeUpgrade php7-shmopUpgrade php8-shmopUpgrade php8-pharUpgrade php74-pdoUpgrade php7-tokenizerUpgrade php7-gettextUpgrade php74Upgrade php74-dbaUpgrade php74-mbstringUpgrade php7-pdoUpgrade php74-domUpgrade php8-gdUpgrade php74-odbcUpgrade php74-iconvUpgrade php8-enchantUpgrade php7-mysqlUpgrade php74-tidyUpgrade php74-pharUpgrade php8-sysvsemUpgrade php7-sysvsemUpgrade php74-mysqlUpgrade php74-ldapUpgrade php8-xmlwriterUpgrade php7-posixUpgrade php8-testUpgrade php74-intlUpgrade php7-testUpgrade php8-pdoUpgrade php7-socketsUpgrade php8-bcmathUpgrade php8-calendarUpgrade php7-sqliteUpgrade php7-odbcUpgrade php7-jsonUpgrade php8-intlUpgrade php8-mbstringUpgrade php74-socketsUpgrade php7-mbstringUpgrade php7-develUpgrade apache2-mod_php7Upgrade php8-soapUpgrade php8-sqliteUpgrade php8-readlineUpgrade php8-fpmUpgrade php8-sodiumUpgrade php7-calendarUpgrade php7-ftpUpgrade php8-sysvshmUpgrade php8-bz2Upgrade php7-pharUpgrade apache2-mod_php8Upgrade php8-gmpUpgrade php8Upgrade php7-ldapUpgrade php74-shmopUpgrade php74-sqliteUpgrade php8-pgsqlUpgrade php8-curlUpgrade php74-bcmathUpgrade php7-zlibUpgrade php7-readlineUpgrade php7-dbaUpgrade php7-cliUpgrade php74-sodiumUpgrade php7-soap | Nov 16, 2022 | Nov 14, 2022 |
| Ubuntu | — | Upgrade php8.1-cliUpgrade php8.1Upgrade php7.4-cliUpgrade libapache2-mod-php8.1Upgrade php8.1-cgiUpgrade php8.1-zipUpgrade libapache2-mod-php7.4Upgrade php7.4-zipUpgrade php7.4-cgiUpgrade libapache2-mod-php8.0Upgrade php7.4 | Nov 9, 2022 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub