Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-10546

Опубликовано: 29 апр. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 5
CVSS3: 7.5

Описание

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

РелизСтатусПримечание
artful

DNE

bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

5.5.9+dfsg-1ubuntu4.25
precise/esm

not-affected

trusty

released

5.5.9+dfsg-1ubuntu4.25
trusty/esm

not-affected

5.5.9+dfsg-1ubuntu4.25
upstream

released

5.6.36
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

7.0.30-0ubuntu0.16.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.0.30
xenial

released

7.0.30-0ubuntu0.16.04.1

Показывать по

РелизСтатусПримечание
artful

released

7.1.17-0ubuntu0.17.10.1
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.1.17
xenial

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

released

7.2.5-0ubuntu0.18.04.1
devel

released

7.2.5-0ubuntu0.18.04.1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

7.2.5-0ubuntu0.18.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

7.2.5
xenial

DNE

Показывать по

EPSS

Процентиль: 98%
0.57167
Средний

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 7 лет назад

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

CVSS3: 7.5
nvd
около 7 лет назад

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

CVSS3: 7.5
debian
около 7 лет назад

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1 ...

CVSS3: 7.5
github
около 3 лет назад

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

CVSS3: 7.5
fstec
около 7 лет назад

Уязвимость потокового фильтра iconv (ext/iconv/iconv.c) интерпретатора языка программирования PHP, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 98%
0.57167
Средний

5 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2018-10546