Summary
It was discovered that PHP incorrectly handled restarting certain child
processes when php-fpm is used. A remote attacker could possibly use this
issue to cause a denial of service. This issue was only addressed in Ubuntu
18.04 LTS. (CVE-2015-9253)
It was discovered that PHP incorrectly handled certain exif tags in JPEG
images. A remote attacker could possibly use this issue to cause PHP to
crash, resulting in a denial of service. (CVE-2018-14851, CVE-2018-14883)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | php5 | 5.5.9+dfsg-1ubuntu4.26 |
| Ubuntu · 16.04 LTS 16.04:LTS | php7.0 | 7.0.32-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | php7.2 | 7.2.10-0ubuntu0.18.04.1 |
Vulnerabilities 3
-
Unscored —
An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master proc…
-
Unscored —
exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.…
-
Unscored —
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Inte…