The vulnerability of the `ldap_get_dn` function in the PHP interpreter, related to a pointer dereferencing error, allows attackers to trigger a denial-of-service attack.

PHP interpreter vulnerability in ldap_get_dn causes remote denial of service due to pointer dereference with crafted LDAP responses.

Reporter	Title	Published	Views	Family All 101
IBM Security Bulletins	Security Bulletin: API Connect Developer Portal is affected by multiple PHP vulnerabilities	1 Aug 201813:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in php (CVE-2018-10548 CVE-2018-12882)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect Developer Portal is impacted by PHP vulnerabilities (CVE-2018-10548, CVE-2018-10546)	23 Jun 201802:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201818:00	–	ibm
Amazon	Medium: php56, php70, php71	10 May 201800:00	–	amazon
Tenable Nessus	Amazon Linux AMI : php56 / php70,php71 (ALAS-2018-1019)	11 May 201800:00	–	nessus
Tenable Nessus	Debian DLA-1373-1 : php5 security update	10 May 201800:00	–	nessus
Tenable Nessus	Debian DLA-1397-1 : php5 security update	27 Jun 201800:00	–	nessus
Tenable Nessus	Debian DSA-4240-1 : php7.0 - security update	6 Jul 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2018-1217)	3 Jul 201800:00	–	nessus

Vulners

Node

php_group phpRange<5.6.36

php_group phpRange7.0.0–7.0.30

php_group phpRange7.1.0–7.1.17

php_group phpRange7.2.0–7.2.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-10548
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-10548
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
web	www.web.nvd.nist.gov/view/vuln/detail

30 Sep 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

CVSS 37.5

EPSS0.52703