Vulnerability Description
An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | < 5.6.35 |
| Canonical | Ubuntu Linux | 12.04 |
| Debian | Debian Linux | 7.0 |
| Netapp | Storage Automation Store | - |
Related Weaknesses (CWE)
References
- http://php.net/ChangeLog-5.phpPatchVendor Advisory
- http://php.net/ChangeLog-7.phpPatchVendor Advisory
- http://www.securityfocus.com/bid/104022Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:2519
- https://bugs.php.net/bug.php?id=75605Issue TrackingPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00004.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/06/msg00005.htmlMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201812-01Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180607-0003/Third Party Advisory
- https://usn.ubuntu.com/3646-1/Third Party Advisory
- https://usn.ubuntu.com/3646-2/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4240Third Party Advisory
- https://www.tenable.com/security/tns-2018-12Third Party Advisory
- http://php.net/ChangeLog-5.phpPatchVendor Advisory
- http://php.net/ChangeLog-7.phpPatchVendor Advisory
FAQ
What is CVE-2018-10545?
CVE-2018-10545 is a vulnerability with a CVSS score of 4.7 (MEDIUM). An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c ...
How severe is CVE-2018-10545?
CVE-2018-10545 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-10545?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php, Canonical Ubuntu Linux, Debian Debian Linux, Netapp Storage Automation Store.