CVE-2018-10548: Null Pointer Dereference
An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer dereference and application crash) because of mishandling of the ldapgetdn return value.
Other sources
Fixed bug (Malicious LDAP-Server Response causes Crash). (CVE-2018-10548)
— PHP
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10548?
CVE-2018-10548 has been classified as a denial of service vulnerability that can cause application crashes.
How do I fix CVE-2018-10548?
To fix CVE-2018-10548, you should upgrade to PHP version 5.6.36, 7.0.30, 7.1.17, or 7.2.5.
What versions of PHP are affected by CVE-2018-10548?
CVE-2018-10548 affects PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5.
What is the primary issue caused by CVE-2018-10548?
The primary issue caused by CVE-2018-10548 is the mishandling of the ldap_get_dn return value leading to a NULL pointer dereference.
Who published information regarding CVE-2018-10548?
Information about CVE-2018-10548 was published by the security community and is referenced in various vulnerability databases.