CVE-2018-5712: canonical ubuntu_linux

Modified

AliasesALPINE-CVE-2018-5712UBUNTU-CVE-2018-5712DLA-1251-1

Published 16-01-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-5712 is a medium (CVSS 6.1) vulnerability in canonical ubuntu_linux. EPSS estimates a 79.95% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.1, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.1/10

010

Medium · v3.0 (NVD)

EPSS score

79.95%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 5

DSA-4080-1 DSA-4081-1 RHSA-2018:1296 RHSA-2019:2519 RHSA-2020:1112 SUSE-SU-2018:0216-1+4 more

Timeline

16-01-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.06.1v2.04.3

EPSS trend

Probability

79.95%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 79.95% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-79Improper Neutralization of Input During Web Page GenerationThe product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Alpine2 products

php5< 5.6.36-r0
php7< 7.2.5-r0 | < 7.0.30-r0 | < 7.1.17-r0 | < 7.1.29-r0

Debian2 products

php5< 5.4.45-0+deb7u12
debian_linuxEOL7.0

Ubuntu2 products

php5< 5.5.9+dfsg-1ubuntu4.23
php7.0< 7.0.28-0ubuntu0.16.04.1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 17.10

Php1 product

phpEOL≤ 5.6.32 | ≥ 7.0.0, ≤ 7.0.26 | > 7.1.0, ≤ 7.1.12 | 7.2.0

5 vendors · 8 products

References

19 links

usn.ubuntu.com/3600-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securitytracker.com/id/1040363VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/104020VDB EntryX Refsource BIDThird Party Advisory
access.redhat.com/errata/RHSA-2018:1296Vendor AdvisoryX Refsource REDHATThird Party Advisory
php.net/ChangeLog-5.phpX Refsource CONFIRMRelease NotesVendor AdvisoryREPORT
usn.ubuntu.com/3566-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
php.net/ChangeLog-7.phpX Refsource CONFIRMRelease NotesVendor AdvisoryREPORT
lists.debian.org/debian-lts-announce/2018/01/msg00025.htmlMailing ListX Refsource MLISTThird Party Advisory
bugs.php.net/bug.php?id=74782X Refsource CONFIRMIssue TrackingPatchVendor Advisory
www.securityfocus.com/bid/102742VDB EntryX Refsource BIDThird Party Advisory

Show all 19 references

usn.ubuntu.com/3600-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2019:2519Vendor AdvisoryX Refsource REDHAT
www.oracle.com/security-alerts/cpuapr2020.htmlX Refsource MISC
security.alpinelinux.org/vuln/CVE-2018-5712Advisory
ubuntu.com/security/CVE-2018-5712REPORT
ubuntu.com/security/notices/USN-3566-1Advisory
ubuntu.com/security/notices/USN-3600-1Advisory
ubuntu.com/security/notices/USN-3600-2Advisory
www.cve.org/CVERecord?id=CVE-2018-5712REPORT