- Home
- CVEs with nessus.description==Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language :
CVE-2018-7584
A stack-buffer-overflow while parsing HTTP response results in copying a large string and possible memory corruption and/or denial of service
CVE-2018-10545
Dumpable FPM child processes allow bypassing opcache access controls resulting in potential information disclosure where one user can obtain information about another user's running PHP applications
CVE-2018-10546
An invalid sequence of bytes can trigger an infinite loop in the stream filter convert.iconv
CVE-2018-10547
A previous fix for CVE-2018-5712 may not be complete, resulting in an additional vulnerability in the form of a reflected XSS in the PHAR 403 and 404 error pages
CVE-2018-10548
A malicious remote LDAP server can send a crafted response that will cause a denial of service (NULL pointer dereference resulting in an application crash)
CVE-2018-10549
A crafted JPEG file can case an out-of-bounds read and heap buffer overflow
For Debian 8 'Jessie', these problems have been fixed in version 5.6.36+dfsg-0+deb8u1.
We recommend that you upgrade your php5 packages.
NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top