NetSight
IP …
high7.5

CVE-2018-10548

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.

Impact

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldap_get_dn return value.

Affected products

VendorProductAffected versions
PhpPhp
before 5.6.36
from 7.0.0 before 7.0.30
from 7.1.0 before 7.1.17
from 7.2.0 before 7.2.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10, 18.04
DebianDebian Linux
Versions 7.0, 8.0, 9.0
NetappStorage Automation Store
All versions

Weakness classification

CWE-476

References