The vulnerability of the streaming filter iconv (ext/iconv/iconv.c) in the PHP programming language interpreter allows a hacker to cause a service failure.

The PHP iconv streaming filter has an infinite loop bug from bad input, enabling remote service failure.

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: API Connect Developer Portal is affected by multiple PHP vulnerabilities	1 Aug 201813:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect Developer Portal is impacted by PHP vulnerabilities (CVE-2018-10548, CVE-2018-10546)	23 Jun 201802:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201818:00	–	ibm
Amazon	Medium: php56, php70, php71	10 May 201800:00	–	amazon
Tenable Nessus	Amazon Linux AMI : php56 / php70,php71 (ALAS-2018-1019)	11 May 201800:00	–	nessus
Tenable Nessus	Debian DLA-1397-1 : php5 security update	27 Jun 201800:00	–	nessus
Tenable Nessus	Debian DSA-4240-1 : php7.0 - security update	6 Jul 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2018-1309)	27 Sep 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2018-1310)	27 Sep 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1069)	8 Mar 201900:00	–	nessus

Vulners

Node

php_group phpRange<5.6.36

php_group phpRange7.0.0–7.0.30

php_group phpRange7.1.0–7.1.17

php_group phpRange7.2.0–7.2.5

Source	Link
wiki	www.wiki.astralinux.ru/pages/viewpage.action
php	www.php.net/ChangeLog-5.php
php	www.php.net/ChangeLog-7.php
debian	www.debian.org/security/2018/dsa-4240
lists	www.lists.debian.org/debian-lts-announce/2018/06/msg00005.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20180607-0003/
usn	www.usn.ubuntu.com/3646-1/
web	www.web.nvd.nist.gov/view/vuln/detail

25 Nov 2019 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.5

CVSS 27.8

EPSS0.10564