Summary
It was discovered that PHP incorrectly handled exif tags in certain images.
A remote attacker could use this issue to cause PHP to crash, resulting in
a denial of service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | php7.2 | 7.2.7-0ubuntu0.18.04.1 |
Vulnerabilities 1
-
Unscored —
exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif…
References
-
report
https://ubuntu.com/security/CVE-2018-12882