Executive Summary

Informations
NameCVE-2018-10545First vendor Publication2018-04-29
VendorCveLast vendor Modification2019-03-18

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score1.9Attack RangeLocal
Cvss Impact Score2.9Attack ComplexityMedium
Cvss Expoit Score3.4AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10545

CWE : Common Weakness Enumeration

%idName
100 %CWE-200Information Exposure

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1
Application785
Os5
Os3

Nessus® Vulnerability Scanner

DateDescription
2018-12-03Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201812-01.nasl - Type : ACT_GATHER_INFO
2018-07-06Name : The remote Debian host is missing a security-related update.
File : debian_DSA-4240.nasl - Type : ACT_GATHER_INFO
2018-06-27Name : The remote Debian host is missing a security update.
File : debian_DLA-1397.nasl - Type : ACT_GATHER_INFO
2018-05-10Name : The remote Debian host is missing a security update.
File : debian_DLA-1373.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/104022
CONFIRM http://php.net/ChangeLog-5.php
http://php.net/ChangeLog-7.php
https://bugs.php.net/bug.php?id=75605
https://security.netapp.com/advisory/ntap-20180607-0003/
https://www.tenable.com/security/tns-2018-12
DEBIAN https://www.debian.org/security/2018/dsa-4240
GENTOO https://security.gentoo.org/glsa/201812-01
MLIST https://lists.debian.org/debian-lts-announce/2018/05/msg00004.html
https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html
UBUNTU https://usn.ubuntu.com/3646-1/
https://usn.ubuntu.com/3646-2/

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
DateInformations
2019-06-08 12:10:03
  • Multiple Updates
2019-03-18 17:19:27
  • Multiple Updates
2018-12-03 17:19:17
  • Multiple Updates
2018-10-02 12:13:07
  • Multiple Updates
2018-09-19 17:19:51
  • Multiple Updates
2018-07-09 05:18:01
  • Multiple Updates
2018-06-28 09:19:11
  • Multiple Updates
2018-06-09 09:19:08
  • Multiple Updates
2018-06-06 21:20:04
  • Multiple Updates
2018-05-18 09:19:26
  • Multiple Updates
2018-05-16 09:19:32
  • Multiple Updates
2018-05-11 09:19:11
  • Multiple Updates
2018-05-02 09:19:26
  • Multiple Updates
2018-04-30 00:19:45
  • First insertion