Vulnerability in N/a
CVE-2018-10548
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) becaus…
EPSS: 0.527 (98.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 104019 (vdb-entry, x_refsource_BID)
- 1040807 (vdb-entry, x_refsource_SECTRACK)
- USN-3646-2 (x_refsource_UBUNTU, vendor-advisory)
- bugs.php.net/bug.php (x_refsource_CONFIRM)
- DSA-4240 (vendor-advisory, x_refsource_DEBIAN)
- www.tenable.com/security/tns-2018-12 (x_refsource_CONFIRM)
- USN-3646-1 (x_refsource_UBUNTU, vendor-advisory)
- php.net/ChangeLog-5.php (x_refsource_CONFIRM)
- [debian-lts-announce] 20180509 [SECURITY] [DLA 1373-1] php5 security update (mailing-list, x_refsource_MLIST)
- php.net/ChangeLog-7.php (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2018-10548?
- CVE-2018-10548 is a vulnerability in N/a. Published 2018-04-29.
- Is CVE-2018-10548 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.