CVE-2017-18264: debian debian_linux
Vulnerability summary
CVE-2017-18264 is a critical (CVSS 9.8) vulnerability in debian debian_linux. EPSS estimates a 2.82% chance of exploitation in the next 30 days, higher than 86.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 01-05-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.82%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
-0.03 pp
From 2.85% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- phpmyadmin< 4:4.6.6-2
- debian_linuxEOL8.0
Phpmyadmin1 product
- phpmyadminEOL≥ 4.0.0, < 4.0.10.20 | ≥ 4.4.0, ≤ 4.4.15.10 | ≥ 4.6.0, ≤ 4.6.6 | 4.7.0:beta1 | 4.7.0:rc1
Ubuntu1 product
- phpmyadmin< 4:4.0.10-1ubuntu0.1+esm4 | < 4:4.5.4.1-2ubuntu2.1+esm3
3 vendors · 4 products
References
9 links
lists.debian.org/debian-lts-announce/2018/07/msg00006.htmlMailing ListX Refsource MLISTThird Party Advisory