CVE-2018-10548
published 2018-04-29CVE-2018-10548: An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to…
PriorityP338high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
8.68%
94.5th percentile
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| php | php | < 5.6.36 | 5.6.36 |
| php | php | >= 7.0.0 < 7.0.30 | 7.0.30 |
| php | php | >= 7.1.0 < 7.1.17 | 7.1.17 |
| php | php | >= 7.2.0 < 7.2.5 | 7.2.5 |
| php5 | php5 | >= 0 < 5.5.9+dfsg-1ubuntu4.25 | 5.5.9+dfsg-1ubuntu4.25 |
Detection & IOCsextracted from sources · hover to see the quote
- →The vulnerability is triggered by a malicious remote LDAP server sending a crafted reply that causes mishandling of the ldap_get_dn return value in ext/ldap/ldap.c, resulting in a NULL pointer dereference and PHP application crash (DoS). ↗
- →Monitor for unexpected PHP process crashes (segfaults/NULL pointer dereferences) originating from LDAP operations, which may indicate exploitation attempts from a malicious LDAP server. ↗
- →Upstream patch commit for reference in source-level detection or patch verification: https://git.php.net/?p=php-src.git;a=commit;h=49782c54994ecca2ef2a061063bd5a7079c43527 ↗
- ·Affected PHP versions are 5.x before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. PHP 8 (Red Hat Enterprise Linux 8) is listed as not affected. ↗
- ·Red Hat Enterprise Linux 5, 6, and 7 packages (php, php53, rh-php70-php) are marked 'Will not fix', meaning patched packages may not be available from Red Hat for those platforms. ↗
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2018-05-16·CVSS 4.7
CVE-2018-10545 [MEDIUM] PHP vulnerabilities
Title: PHP vulnerabilities
Summary: Several security issues were fixed in PHP.
USN-3646-1 fixed a vulnerability in PHP. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that PHP incorrectly handled opcache access controls
when configured to use PHP-FPM. A local user could possibly use this issue
to obtain sensitive information from another user's PHP applications.
(CVE-2018-10545)
It was discovered that the PHP PHAR error pages incorrectly filtered
certain data. A remote attacker could possibly use this issue to perform
a reflected XSS attack. (CVE-2018-10547)
It was discovered that PHP incorrectly handled LDAP. A malicious remote
LDAP server could possibly use this issue to cause PHP to crash, resulting
in a denial of s
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2018-05-14·CVSS 4.7
CVE-2018-10545 [MEDIUM] PHP vulnerabilities
Title: PHP vulnerabilities
Summary: Several security issues were fixed in PHP.
It was discovered that PHP incorrectly handled opcache access controls
when configured to use PHP-FPM. A local user could possibly use this issue
to obtain sensitive information from another user's PHP applications.
(CVE-2018-10545)
It was discovered that the PHP iconv stream filter incorrect handled
certain invalid multibyte sequences. A remote attacker could possibly use
this issue to cause PHP to hang, resulting in a denial of service.
(CVE-2018-10546)
It was discovered that the PHP PHAR error pages incorrectly filtered
certain data. A remote attacker could possibly use this issue to perform
a reflected XSS attack. (CVE-2018-10547)
It was discovered that PHP incorrectly handled LDAP. A malicious remote
L
Red Hat
php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
vendor_redhat·2018-04-26·CVSS 7.5
CVE-2018-10548 [HIGH] CWE-476 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
Package: php (Red Hat Enterprise Linux 5) - Will not fix
Package: php53 (Red Hat Enterprise Linux 5) - Will not fix
Package: php (Red Hat Enterprise Linux 6) - Will not fix
Package: php (Red Hat Enterprise Linux 7) - Will not fix
Package: php (Red Hat Enterprise Linux 8) - Not affected
Package: rh-php70-php (Red Hat Software Collections) - Will not fix
GHSA
GHSA-pj74-6489-hfx6: An issue was discovered in PHP before 5
ghsa_unreviewed·2022-05-14
CVE-2018-10548 [HIGH] CWE-476 GHSA-pj74-6489-hfx6: An issue was discovered in PHP before 5
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
OSV
php5, php7.0, php7.1, php7.2 vulnerabilities
osv·2018-05-14·CVSS 4.7
CVE-2018-10545 [MEDIUM] php5, php7.0, php7.1, php7.2 vulnerabilities
php5, php7.0, php7.1, php7.2 vulnerabilities
It was discovered that PHP incorrectly handled opcache access controls
when configured to use PHP-FPM. A local user could possibly use this issue
to obtain sensitive information from another user's PHP applications.
(CVE-2018-10545)
It was discovered that the PHP iconv stream filter incorrect handled
certain invalid multibyte sequences. A remote attacker could possibly use
this issue to cause PHP to hang, resulting in a denial of service.
(CVE-2018-10546)
It was discovered that the PHP PHAR error pages incorrectly filtered
certain data. A remote attacker could possibly use this issue to perform
a reflected XSS attack. (CVE-2018-10547)
It was discovered that PHP incorrectly handled LDAP. A malicious remote
LDAP server could possibly use this
OSV
CVE-2018-10548: An issue was discovered in PHP before 5
osv·2018-04-29·CVSS 7.5
CVE-2018-10548 [HIGH] CVE-2018-10548: An issue was discovered in PHP before 5
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
No detection rules found.
No public exploits indexed.
Trendmicro
Current and Future Attacks Threatening Esports
blogs_trendmicro·2019-10-29
Current and Future Attacks Threatening Esports
Cyber Crime
# Current and Future Attacks Threatening Esports
Cybercriminals will increasingly target the esports industry over the next three years. Many underground forums already have sections dedicated to gaming or esports sales, and the goods and services offered in these forums generate a lot of interest.
By: Mayra Rosario Fuentes, Fernando Merces
2019/10/29
Read time: ( words)
Save to Folio
Esports has evolved from niche entertainment into a highly lucrative industry. Growing ad revenue and sponsorships allow the tournaments to grow; and as the tournaments grow, the prize pool grows as well. Of course, growing popularity and increased funds open up the entities involved to cybercriminals looking for any opportunity to make a profit.
Cheats and hacks are widely available in und
Trendmicro
Current and Future Attacks Threatening Esports
blogs_trendmicro·2019-10-29
Current and Future Attacks Threatening Esports
Cyber Crime
# Current and Future Attacks Threatening Esports
Cybercriminals will increasingly target the esports industry over the next three years. Many underground forums already have sections dedicated to gaming or esports sales, and the goods and services offered in these forums generate a lot of interest.
By: Mayra Rosario Fuentes, Fernando Merces
Oct 29, 2019
Read time: ( words)
Save to Folio
Esports has evolved from niche entertainment into a highly lucrative industry. Growing ad revenue and sponsorships allow the tournaments to grow; and as the tournaments grow, the prize pool grows as well. Of course, growing popularity and increased funds open up the entities involved to cybercriminals looking for any opportunity to make a profit.
Cheats and hacks are widely available in u
Bugzilla
CVE-2018-10548 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
bugzilla·2018-05-02·CVSS 7.5
CVE-2018-10548 [HIGH] CVE-2018-10548 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
CVE-2018-10548 php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.
Upstream bug:
https://bugs.php.net/bug.php?id=76248
Upstream patch:
https://git.php.net/?p=php-src.git;a=commit;h=49782c54994ecca2ef2a061063bd5a7079c43527
Discussion:
Created php tracking bugs for this issue:
Affects: fedora-all [bug 1573816]
---
This issue has been addressed in the following products:
Red Hat Software Collections for Red Hat Enterprise Linux 7
R
Bugzilla
CVE-2018-10546 CVE-2018-10547 CVE-2018-10548 CVE-2018-10549 php: various flaws [fedora-all]
bugzilla·2018-05-02·CVSS 7.5
CVE-2018-10546 [HIGH] CVE-2018-10546 CVE-2018-10547 CVE-2018-10548 CVE-2018-10549 php: various flaws [fedora-all]
CVE-2018-10546 CVE-2018-10547 CVE-2018-10548 CVE-2018-10549 php: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supp
http://php.net/ChangeLog-5.phphttp://php.net/ChangeLog-7.phphttp://www.securityfocus.com/bid/104019http://www.securitytracker.com/id/1040807https://access.redhat.com/errata/RHSA-2019:2519https://bugs.php.net/bug.php?id=76248https://lists.debian.org/debian-lts-announce/2018/05/msg00004.htmlhttps://lists.debian.org/debian-lts-announce/2018/06/msg00005.htmlhttps://security.gentoo.org/glsa/201812-01https://security.netapp.com/advisory/ntap-20180607-0003/https://usn.ubuntu.com/3646-1/https://usn.ubuntu.com/3646-2/https://www.debian.org/security/2018/dsa-4240https://www.tenable.com/security/tns-2018-12https://www.tenable.com/security/tns-2019-07http://php.net/ChangeLog-5.phphttp://php.net/ChangeLog-7.phphttp://www.securityfocus.com/bid/104019http://www.securitytracker.com/id/1040807https://access.redhat.com/errata/RHSA-2019:2519https://bugs.php.net/bug.php?id=76248https://lists.debian.org/debian-lts-announce/2018/05/msg00004.htmlhttps://lists.debian.org/debian-lts-announce/2018/06/msg00005.htmlhttps://security.gentoo.org/glsa/201812-01https://security.netapp.com/advisory/ntap-20180607-0003/https://usn.ubuntu.com/3646-1/https://usn.ubuntu.com/3646-2/https://www.debian.org/security/2018/dsa-4240https://www.tenable.com/security/tns-2018-12https://www.tenable.com/security/tns-2019-07
2018-04-29
Published