CVE-2018-14883
libapache2-mod-php7.2: An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8
CVE-2018-14883 is fixed in 37 products on 1 platform, first by libapache2-mod-php7.2 7.2.10-0ubuntu0.18.04.1, released September 16, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0886
95th percentile
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libapache2-mod-php7.2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | libapache2-mod-php7.2 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| libphp7.2-embed · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | libphp7.2-embed 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-bcmath · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-bcmath 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-bz2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-bz2 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-cgi · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-cgi 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-cli · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-cli 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-common · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-common 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-curl · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-curl 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-dba · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-dba 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-enchant · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-enchant 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-fpm · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-fpm 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-gd · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-gd 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-gmp · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-gmp 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-imap · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-imap 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-interbase · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-interbase 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-intl · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-intl 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-json · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-json 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-ldap · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-ldap 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-mbstring · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-mbstring 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-mysql · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-mysql 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-odbc · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-odbc 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-opcache · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-opcache 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-pgsql · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-pgsql 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-phpdbg · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-phpdbg 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-pspell · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-pspell 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-readline · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-readline 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-recode · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-recode 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-snmp · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-snmp 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-soap · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-soap 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-sqlite3 · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-sqlite3 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-sybase · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-sybase 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-tidy · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-tidy 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-xml · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-xml 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-xmlrpc · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-xmlrpc 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-xsl · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-xsl 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |
| php7.2-zip · Ubuntu 18.04.6 LTS (bionic) | 7.2.10-0ubuntu0.18.04.1 | php7.2-zip 7.2.10-0ubuntu0.18.04.1 | Sep 16, 2018 |