CVE-2018-19935
libapache2-mod-php7.2: ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointe...
CVE-2018-19935 is fixed in 37 products on 1 platform, first by libapache2-mod-php7.2 7.2.15-0ubuntu0.18.04.1, released February 21, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0628
93rd percentile
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libapache2-mod-php7.2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | libapache2-mod-php7.2 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| libphp7.2-embed · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | libphp7.2-embed 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-bcmath · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-bcmath 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-bz2 · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-bz2 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-cgi · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-cgi 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-cli · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-cli 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-common · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-common 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-curl · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-curl 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-dba · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-dba 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-enchant · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-enchant 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-fpm · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-fpm 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-gd · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-gd 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-gmp · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-gmp 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-imap · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-imap 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-interbase · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-interbase 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-intl · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-intl 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-json · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-json 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-ldap · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-ldap 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-mbstring · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-mbstring 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-mysql · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-mysql 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-odbc · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-odbc 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-opcache · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-opcache 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-pgsql · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-pgsql 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-phpdbg · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-phpdbg 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-pspell · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-pspell 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-readline · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-readline 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-recode · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-recode 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-snmp · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-snmp 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-soap · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-soap 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-sqlite3 · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-sqlite3 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-sybase · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-sybase 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-tidy · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-tidy 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-xml · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-xml 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-xmlrpc · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-xmlrpc 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-xsl · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-xsl 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |
| php7.2-zip · Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | php7.2-zip 7.2.15-0ubuntu0.18.04.1 | Feb 21, 2019 |