# CVE-2018-19935: libapache2-mod-php7.2: ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointe...

CVE-2018-19935 is fixed in 37 products on 1 platform, first by libapache2-mod-php7.2 7.2.15-0ubuntu0.18.04.1, released February 21, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-19935
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0628
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 7, 2018

## Description

ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libapache2-mod-php7.2 Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [libapache2-mod-php7.2 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libapache2-mod-php7.2-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | libphp7.2-embed Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [libphp7.2-embed 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libphp7.2-embed-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2 Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-bcmath Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-bcmath 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-bcmath-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-bz2 Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-bz2 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-bz2-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-cgi Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-cgi 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-cgi-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-cli Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-cli 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-cli-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-common Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-common 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-common-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-curl Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-curl 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-curl-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-dba Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-dba 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-dba-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-enchant Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-enchant 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-enchant-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-fpm Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-fpm 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-fpm-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-gd Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-gd 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-gd-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-gmp Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-gmp 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-gmp-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-imap Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-imap 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-imap-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-interbase Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-interbase 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-interbase-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-intl Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-intl 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-intl-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-json Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-json 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-json-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-ldap Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-ldap 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-ldap-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-mbstring Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-mbstring 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-mbstring-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-mysql Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-mysql 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-mysql-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-odbc Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-odbc 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-odbc-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-opcache Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-opcache 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-opcache-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-pgsql Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-pgsql 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-pgsql-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-phpdbg Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-phpdbg 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-phpdbg-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-pspell Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-pspell 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-pspell-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-readline Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-readline 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-readline-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-recode Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-recode 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-recode-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-snmp Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-snmp 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-snmp-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-soap Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-soap 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-soap-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-sqlite3 Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-sqlite3 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-sqlite3-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-sybase Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-sybase 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-sybase-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-tidy Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-tidy 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-tidy-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-xml Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-xml 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xml-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-xmlrpc Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-xmlrpc 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xmlrpc-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-xsl Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-xsl 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-xsl-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |
| Linux | php7.2-zip Ubuntu 18.04.6 LTS (bionic) | 7.2.15-0ubuntu0.18.04.1 | [php7.2-zip 7.2.15-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php7.2-zip-7.2.15-0ubuntu0.18.04.1.md) | Feb 21, 2019 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo