ISOMAN

CVE

CVE-2020-7064

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html
  2. https://bugs.php.net/bug.php?id=79282
  3. https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html
  4. https://security.netapp.com/advisory/ntap-20200403-0001/
  5. https://usn.ubuntu.com/4330-1/
  6. https://usn.ubuntu.com/4330-2/
  7. https://www.debian.org/security/2020/dsa-4717
  8. https://www.debian.org/security/2020/dsa-4719
  9. https://www.oracle.com/security-alerts/cpujan2021.html
  10. https://www.tenable.com/security/tns-2021-14
  11. http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html
  12. https://bugs.php.net/bug.php?id=79282
  13. https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html
  14. https://security.netapp.com/advisory/ntap-20200403-0001/
  15. https://usn.ubuntu.com/4330-1/
  16. https://usn.ubuntu.com/4330-2/
  17. https://www.debian.org/security/2020/dsa-4717
  18. https://www.debian.org/security/2020/dsa-4719
  19. https://www.oracle.com/security-alerts/cpujan2021.html
  20. https://www.tenable.com/security/tns-2021-14