Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-7128HistorySep 12, 2016 - 1:59 a.m.
CVE-2016-7128
2016-09-1201:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12
0.005 Low
EPSS
Percentile
75.3%
The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | php7.0 | < 7.0.33-0+deb9u8 | php7.0_7.0.33-0+deb9u8_all.deb |
Related
prion
prion
Code injection
2016-09-12 01:59:00
redhatcve
redhatcve
CVE-2016-7128
2016-09-09 13:19:19
nvd
nvd
CVE-2016-7128
2016-09-12 01:59:06
ubuntucve
ubuntucve
CVE-2016-7128
2016-09-11 00:00:00
cvelist
cvelist
CVE-2016-7128
2016-09-12 01:00:00
cve
cve
CVE-2016-7128
2016-09-12 01:59:06
hackerone
hackerone
f5
f5
K30216728 : Multiple PHP vulnerabilities
2016-11-02 00:00:00
SOL30216728 - Multiple PHP vulnerabilities
2016-11-01 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Linux
2016-09-12 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
2016-09-20 00:00:00
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Windows
2016-09-12 00:00:00
nessus
nessus
PHP 5.6.x < 5.6.25 Multiple Vulnerabilities
2016-08-23 00:00:00
Tenable SecurityCenter PHP < 5.6.25 Multiple Vulnerabilities (TNS-2016-09)
2017-06-26 00:00:00
openSUSE Security Update : php5 (openSUSE-2016-1095)
2016-09-20 00:00:00
suse
suse
Security update for php5 (important)
2016-09-19 19:09:23
Security update for php53 (important)
2016-10-05 18:12:21
Security update for php53 (important)
2016-09-16 21:09:09
slackware
slackware
[slackware-security] php
2016-09-08 22:38:27
ibm
ibm
debian
debian
[SECURITY] [DLA 749-1] php5 security update
2016-12-16 21:48:18
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
osv
osv
php5 - security update
2016-12-16 00:00:00
cloudfoundry
cloudfoundry
USN-3095-1 PHP vulnerabilities | Cloud Foundry
2016-10-04 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2016-10-04 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
cloudlinux
cloudlinux
Fix of 227 CVE
2020-10-15 12:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:02:26
Null Pointer Dereference
2019-05-02 06:02:24
Insecure Pseudo Random Number Generator
2019-05-02 06:02:16
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45