Memory corruption in PHP - CVE-2018-14883

Vulnerability identifier: #VU13915

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14883

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to integer overflow when processing exif_read_data in any 32-bit system. A remote attacker can trigger heap-based buffer overflow in exif_thumbnail_extract of exif.c and cause the service to crash.

PHP
Debian Linux
Amazon Linux AMI
php5 (Ubuntu package)
php5 (Alpine package)
php7 (Alpine package)
php7.0 (Ubuntu package)
php7.2 (Ubuntu package)

The vulnerability is addressed in the versions 5.6.37, 7.0.31, 7.1.20, 7.2.8.

PHP - addressed in versions 5.6.37, 7.0.31, 7.1.20, 7.2.8
php5 (Ubuntu package) - update to 5.5.9+dfsg-1ubuntu4.26
php5 (Alpine package) - addressed in versions 5.6.38-r0, 5.6.40-r0
php7 (Alpine package) - update to 7.1.30-r0
php7.0 (Ubuntu package) - update to 7.0.32-0ubuntu0.16.04.1
php7.2 (Ubuntu package) - update to 7.2.10-0ubuntu0.18.04.1

• https://bugs.php.net/bug.php?id=76423

• Multiple vulnerabilities in PHP
• Debian update for php7.0
• Ubuntu update for PHP
• Amazon Linux AMI update for php72
• Amazon Linux AMI update for php56, php70, php71
• Memory corruption in php5 (Alpine package)
• Memory corruption in php7 (Alpine package)