CVE-2018-14884

5

MEDIUMCVSS v2

Published

August 3, 2018

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call.

php

NPMAllows you to run PHP code in Node.js in various ways.

>= 7.2.0, < 7.2.1, >= 7.1.0, < 7.1.13, >= 7.0.0, < 7.0.27NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

>= 7.2.0, < 7.2.1, >= 7.1.0, < 7.1.13, >= 7.0.0, < 7.0.27NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-14884

Description

More on this CVE