Infinite loop in PHP - CVE-2018-10546

Vulnerability identifier: #VU12257

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10546

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to infinite loop. A remote attacker can use a stream filter with convert.iconv and not enough input bytes, trigger an infinite loop, one CPU Core at 100% and cause the service to crash.

PHP
Amazon Linux AMI
Gentoo Linux
Debian Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
SUSE Linux
Slackware Linux
Fedora
Opensuse
php7 (Alpine package)
openSUSE Leap
php

The vulnerability is addressed in the following versions: 5.6.36, 7.1.17, 7.2.5 and 7.0.30.

php7 (Alpine package) - update to 7.1.30-r0
php - addressed in versions 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28

• https://bugs.php.net/bug.php?id=76249

• Multiple vulnerabilities in PHP
• SUSE Linux update for php7
• OpenSUSE Linux update for php7
• Amazon Linux AMI update for php56, php70, php71
• Slackware Linux update for php
• OpenSUSE Linux update for php5
• Debian update for php7.0
• Gentoo update for PHP
• Red Hat update for 389-ds-base
• Red Hat update for 389-ds-base
• Infinite loop in php7 (Alpine package)
• Fedora 28 update for php
• Fedora 27 update for php
• Fedora 26 update for php