NULL pointer dereference in PHP - CVE-2018-19935

Vulnerability identifier: #VU16914

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-19935

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to an error in imap_mail if message args is null. A remote attacker can trigger NULL pointer dereference in imap_mail and cause the service to crash.

PHP
php5 (Alpine package)
php7 (Alpine package)
php
Fedora

Update to versions 7.1.26, 7.2.14.

PHP - addressed in versions 7.1.26, 7.2.14
php5 (Alpine package) - update to 5.6.40-r0
php7 (Alpine package) - update to 7.1.30-r0
php - addressed in versions 7.2.13-2.fc28, 7.2.13-2.fc29

• https://bugs.php.net/bug.php?id=77020

• Multiple vulnerabilities in PHP
• NULL pointer dereference in php5 (Alpine package)
• NULL pointer dereference in php7 (Alpine package)
• Fedora 28 update for php
• Fedora 29 update for php