Lucene search

CVE-2018-14883

🗓️ 03 Aug 2018 13:00:29Reported by mitreType

PHP < 7.2.8 Integer Overflow in exif_thumbnail_extrac

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 46
Hacker One	Internet Bug Bounty: Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c	20 Jul 201807:20	–	hackerone
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2018-14883	4 Mar 202500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php56 / php70,php71 (ALAS-2018-1066)	24 Aug 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php72 (ALAS-2018-1067)	24 Aug 201800:00	–	nessus
Tenable Nessus	PHP 7.1.x < 7.1.20 exif_thumbnail_extract() DoS	24 Jul 201800:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3766-1)	18 Sep 201800:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : php53 (SUSE-SU-2018:2681-1)	12 Sep 201800:00	–	nessus
Tenable Nessus	PHP < 5.6.37 or 7.2.x < 7.2.8 Multiple Vulnerabilities (Deprecated)	7 Sep 201800:00	–	nessus
Tenable Nessus	PHP 5.6.x < 5.6.37 exif_thumbnail_extract() DoS	24 Jul 201800:00	–	nessus
Tenable Nessus	Debian DLA-1490-1 : php5 security update	4 Sep 201800:00	–	nessus

Nvd

Node

php phpRange<5.6.37

php phpRange7.0.0–7.0.31

php phpRange7.1.0–7.1.20

php phpRange7.2.0–7.2.8

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

netapp storage_automation_storeMatch-

Source	Link
php	www.php.net/ChangeLog-7.php
usn	www.usn.ubuntu.com/3766-1/
usn	www.usn.ubuntu.com/3766-2/
php	www.php.net/ChangeLog-5.php
debian	www.debian.org/security/2018/dsa-4353
lists	www.lists.debian.org/debian-lts-announce/2018/09/msg00000.html
tenable	www.tenable.com/security/tns-2018-12
security	www.security.netapp.com/advisory/ntap-20181107-0003/
securityfocus	www.securityfocus.com/bid/104871
bugs	www.bugs.php.net/bug.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Aug 2018 13:29Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.49919