cbcvebase.
CVE-2020-7064
published 2020-04-01

CVE-2020-7064: In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for…

PriorityP428medium5.4CVSS 3.1
AVNACLPRNUIRSUCLINAL
EPSS
4.29%
89.9th percentile
In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.

Affected

19 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianphp7.4< php7.4 7.4.5-1 (bullseye)php7.4 7.4.5-1 (bullseye)
opensuseleap
phpphp>= 7.2.0 < 7.2.297.2.29
phpphp>= 7.3.0 < 7.3.167.3.16
phpphp>= 7.4.0 < 7.4.47.4.4
php5php5>= 0 < 5.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm11
php_groupphp>= 7.2.x < 7.2.297.2.29
php_groupphp>= 7.3.x < 7.3.167.3.16
php_groupphp>= 7.4.x < 7.4.47.4.4
tenabletenable.sc< 5.19.05.19.0

CVSS provenance

nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
osv7.5HIGH
vendor_ubuntu7.5HIGH
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.