CVE-2018-14883
Fixed in a distro release EPSS 9%
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
Products: php, canonical ubuntu_linux, debian_linux, netapp storage_automation_store
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.5 | php5 | 5.6.37-r0 |
| Debian 8 | php5 | 5.6.37+dfsg-0+deb8u1 |
| Debian 9 | php7.0 | 7.0.33-0+deb9u1 |
| SUSE Linux Enterprise Server 11 SP4 | php53 | 5.3.17-112.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | php53 | 5.3.17-112.38.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | php53 | 5.3.17-112.38.1 |
| Ubuntu 14.04 LTS | php5 | 5.5.9+dfsg-1ubuntu4.26 |
| Ubuntu 16.04 LTS | php7.0 | 7.0.32-0ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | php7.2 | 7.2.10-0ubuntu0.18.04.1 |