Heap-based buffer overflow in PHP - CVE-2018-14851

Vulnerability identifier: #VU13916

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14851

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer overflow (READ of size 48) while reading exif data. A remote attacker can trigger memory corruption and cause the service to crash.

PHP
Amazon Linux AMI
Debian Linux
php5 (Ubuntu package)
php5 (Alpine package)
php7.0 (Ubuntu package)
php7 (Alpine package)
php7.2 (Ubuntu package)

The vulnerability is addressed in the versions 5.6.37, 7.0.31, 7.1.20, 7.2.8.

PHP - addressed in versions 5.6.37, 7.0.31, 7.1.20, 7.2.8
php5 (Ubuntu package) - update to 5.5.9+dfsg-1ubuntu4.26
php5 (Alpine package) - addressed in versions 5.6.38-r0, 5.6.40-r0
php7.0 (Ubuntu package) - update to 7.0.32-0ubuntu0.16.04.1
php7 (Alpine package) - update to 7.1.30-r0
php7.2 (Ubuntu package) - update to 7.2.10-0ubuntu0.18.04.1

• https://bugs.php.net/bug.php?id=76557

• Multiple vulnerabilities in PHP
• Debian update for php7.0
• Ubuntu update for PHP
• Amazon Linux AMI update for php72
• Amazon Linux AMI update for php56, php70, php71
• Heap-based buffer overflow in php5 (Alpine package)
• Heap-based buffer overflow in php7 (Alpine package)