CVE-2018-19935

ext/imap/phpimap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imapmail function.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type

GIT

Repo

https://github.com/php/php-src

Events

Introduced

fc1df8e7a6886e29a6ed5bef3f674ac61164e847

Fixed

4653a1b260c9d640a292a9548e8def00edc5ca58

Introduced

60fffd296abce5fc071f3c173c25a2696cf683c6

Fixed

bf574c2b67a1f786e36cf679f41b758b973a82c4

Introduced

0221e9f827632942225586687a33cfd554860d5e

Fixed

b3ad2be890e86c69cdc661739c74b677b46a53cb

Introduced

8148cbb78841c8ec0759c0836e7f35dec799d300

Fixed

643a161a24e662fd2afa9bf3591b105f4881e93e

Introduced

Last affected

5dc92c2117cafc61daaaaa240fd46c3ac33872a4

Database specific

{
    "versions": [
        {
            "introduced": "5.6.0"
        },
        {
            "fixed": "5.6.39"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.33"
        },
        {
            "introduced": "7.1.0"
        },
        {
            "fixed": "7.1.26"
        },
        {
            "introduced": "7.2.0"
        },
        {
            "fixed": "7.2.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19935.json"