CVE catalog

CVE-2018-10545

Security update for php7

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.79% · Oct 25, 2026

An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c makes a PR_SET_DUMPABLE prctl call, allowing one user (in a multiuser environment) to obtain sensitive information from the process memory of a second user's PHP applications by running gcore on the PID of the PHP-FPM worker process.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuphp514.045.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp514.045.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp514.045.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.25fixed
Ubuntuphp7.016.047.0.1-5vulnerable
Ubuntuphp7.016.047.0.1-6vulnerable
Ubuntuphp7.016.047.0.2-1vulnerable
Ubuntuphp7.016.047.0.2-3vulnerable
Ubuntuphp7.016.047.0.2-4vulnerable
Ubuntuphp7.016.047.0.2-5vulnerable
Ubuntuphp7.016.047.0.3-2vulnerable
Ubuntuphp7.016.047.0.3-3vulnerable
Ubuntuphp7.016.047.0.3-9ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-5ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-5ubuntu2vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu2vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.016.047.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.016.047.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.30-0ubuntu0.16.04.1fixed
Ubuntuphp7.218.047.2.1-1ubuntu2vulnerable
Ubuntuphp7.218.047.2.2-1ubuntu1vulnerable
Ubuntuphp7.218.047.2.2-1ubuntu2vulnerable
Ubuntuphp7.218.047.2.3-1ubuntu1vulnerable
Ubuntuphp7.218.047.2.5-0ubuntu0.18.04.1fixed
Ubuntuphp514.045.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp514.045.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp514.045.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp514.045.5.9+dfsg-1ubuntu4.25fixed
Ubuntuphp7.016.047.0.1-5vulnerable
Ubuntuphp7.016.047.0.1-6vulnerable
Ubuntuphp7.016.047.0.2-1vulnerable
Ubuntuphp7.016.047.0.2-3vulnerable
Ubuntuphp7.016.047.0.2-4vulnerable
Ubuntuphp7.016.047.0.2-5vulnerable
Ubuntuphp7.016.047.0.3-2vulnerable
Ubuntuphp7.016.047.0.3-3vulnerable
Ubuntuphp7.016.047.0.3-9ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-5ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-5ubuntu2vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu1vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu2vulnerable
Ubuntuphp7.016.047.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.016.047.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.016.047.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.016.047.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.016.047.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.016.047.0.30-0ubuntu0.16.04.1fixed
Ubuntuphp7.218.047.2.1-1ubuntu2vulnerable
Ubuntuphp7.218.047.2.2-1ubuntu1vulnerable
Ubuntuphp7.218.047.2.2-1ubuntu2vulnerable
Ubuntuphp7.218.047.2.3-1ubuntu1vulnerable
Ubuntuphp7.218.047.2.5-0ubuntu0.18.04.1fixed
Debianphp7.097.0.19-1vulnerable
Debianphp7.097.0.20-1vulnerable
Debianphp7.097.0.20-2vulnerable
Debianphp7.097.0.22-1vulnerable
Debianphp7.097.0.22-2vulnerable
Debianphp7.097.0.22-3vulnerable
Debianphp7.097.0.25-1vulnerable
Debianphp7.097.0.26-1vulnerable
Debianphp7.097.0.27-0+deb9u1vulnerable
Debianphp7.097.0.27-1vulnerable
Debianphp7.097.0.28-1vulnerable
Debianphp7.097.0.29-1vulnerable
Debianphp7.097.0.30-0+deb9u1fixed
Debianphp585.6.11+dfsg-1vulnerable
Debianphp585.6.12+dfsg-0+deb8u1vulnerable
Debianphp585.6.12+dfsg-1vulnerable
Debianphp585.6.13+dfsg-0+deb8u1vulnerable
Debianphp585.6.13+dfsg-1vulnerable
Debianphp585.6.13+dfsg-2vulnerable
Debianphp585.6.14+dfsg-0+deb8u1vulnerable
Debianphp585.6.14+dfsg-1vulnerable
Debianphp585.6.15+dfsg-1vulnerable
Debianphp585.6.16+dfsg-1vulnerable
Debianphp585.6.16+dfsg-2vulnerable
Debianphp585.6.16+dfsg-3vulnerable
Debianphp585.6.16+dfsg-4vulnerable
Debianphp585.6.17+dfsg-0+deb8u1vulnerable
Debianphp585.6.17+dfsg-1vulnerable
Debianphp585.6.17+dfsg-3vulnerable
Debianphp585.6.18+dfsg-1vulnerable
Debianphp585.6.19+dfsg-0+deb8u1vulnerable
Debianphp585.6.19+dfsg-1vulnerable
Debianphp585.6.19+dfsg-2vulnerable
Debianphp585.6.20+dfsg-0+deb8u1vulnerable
Debianphp585.6.20+dfsg-1vulnerable
Debianphp585.6.21+dfsg-1vulnerable
Debianphp585.6.21+dfsg-2vulnerable
Debianphp585.6.22+dfsg-0+deb8u1vulnerable
Debianphp585.6.22+dfsg-1vulnerable
Debianphp585.6.22+dfsg-2vulnerable
Debianphp585.6.23+dfsg-0+deb8u1vulnerable
Debianphp585.6.23+dfsg-1vulnerable
Debianphp585.6.24+dfsg-0+deb8u1vulnerable
Debianphp585.6.24+dfsg-1vulnerable
Debianphp585.6.26+dfsg-0+deb8u1vulnerable
Debianphp585.6.26+dfsg-1vulnerable
Debianphp585.6.27+dfsg-0+deb8u1vulnerable
Debianphp585.6.28+dfsg-0+deb8u1vulnerable
Debianphp585.6.29+dfsg-0+deb8u1vulnerable
Debianphp585.6.30+dfsg-0+deb8u1vulnerable
Debianphp585.6.33+dfsg-0+deb8u1vulnerable
Debianphp585.6.7+dfsg-1vulnerable
Debianphp585.6.9+dfsg-0+deb8u1vulnerable
Debianphp585.6.9+dfsg-1vulnerable
Debianphp585.6.36+dfsg-0+deb8u1fixed
Debianphp575.4.11-1vulnerable
Debianphp575.4.15-1vulnerable
Debianphp575.4.34-0+deb7u1vulnerable
Debianphp575.4.35-0+deb7u1vulnerable
Debianphp575.4.35-0+deb7u2vulnerable
Debianphp575.4.36-0+deb7u1vulnerable
Debianphp575.4.36-0+deb7u3vulnerable
Debianphp575.4.38-0+deb7u1vulnerable
Debianphp575.4.39-0+deb7u1vulnerable
Debianphp575.4.39-0+deb7u2vulnerable
Debianphp575.4.4-14vulnerable
Debianphp575.4.4-14+deb7u1vulnerable
Debianphp575.4.4-14+deb7u10vulnerable
Debianphp575.4.4-14+deb7u11vulnerable
Debianphp575.4.4-14+deb7u12vulnerable
Debianphp575.4.4-14+deb7u13vulnerable
Debianphp575.4.4-14+deb7u14vulnerable
Debianphp575.4.4-14+deb7u2vulnerable
Debianphp575.4.4-14+deb7u3vulnerable
Debianphp575.4.4-14+deb7u4vulnerable
Debianphp575.4.4-14+deb7u5vulnerable
Debianphp575.4.4-14+deb7u7vulnerable
Debianphp575.4.4-14+deb7u8vulnerable
Debianphp575.4.4-14+deb7u9vulnerable
Debianphp575.4.4-15vulnerable
Debianphp575.4.4-15.1vulnerable
Debianphp575.4.41-0+deb7u1vulnerable
Debianphp575.4.44-0+deb7u1vulnerable
Debianphp575.4.45-0+deb7u1vulnerable
Debianphp575.4.45-0+deb7u10vulnerable
Debianphp575.4.45-0+deb7u11vulnerable
Debianphp575.4.45-0+deb7u12vulnerable
Debianphp575.4.45-0+deb7u13vulnerable
Debianphp575.4.45-0+deb7u2vulnerable
Debianphp575.4.45-0+deb7u3vulnerable
Debianphp575.4.45-0+deb7u4vulnerable
Debianphp575.4.45-0+deb7u5vulnerable
Debianphp575.4.45-0+deb7u6vulnerable
Debianphp575.4.45-0+deb7u7vulnerable
Debianphp575.4.45-0+deb7u8vulnerable
Debianphp575.4.45-0+deb7u9vulnerable
Debianphp575.4.6-1vulnerable
Debianphp575.4.6-2vulnerable
Debianphp575.4.8-1vulnerable
Debianphp575.4.9-1vulnerable
Debianphp575.4.9-2vulnerable
Debianphp575.4.9-3vulnerable
Debianphp575.4.9-4vulnerable
Debianphp575.4.45-0+deb7u14fixed
Susephp53linux enterprise software development kit 11 sp45.3.17-112.23.1fixed
Susephp53linux enterprise point of sale 11 sp35.3.17-112.23.1fixed
Susephp53linux enterprise server 11 sp3-ltss5.3.17-112.23.1fixed
Susephp53linux enterprise server 11 sp3-teradata5.3.17-112.23.1fixed
Susephp53linux enterprise server 11 sp45.3.17-112.23.1fixed
Susephp53linux enterprise server for sap applications 11 sp45.3.17-112.23.1fixed
Susephp5linux enterprise module for web and scripting 125.5.14-109.27.2fixed
Susephp5linux enterprise software development kit 12 sp35.5.14-109.27.2fixed
Susephp7linux enterprise module for web and scripting 127.0.7-50.38.2fixed
Susephp7linux enterprise software development kit 12 sp37.0.7-50.38.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuphp5deb14.045.5.9+dfsg-1ubuntu4.25Not reportedUBUNTU-CVE-2018-10545Not reported
Ubuntuphp7.0deb16.047.0.30-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2018-10545Not reported
Ubuntuphp7.2deb18.047.2.5-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2018-10545Not reported
Ubuntuphp5deb14.045.5.9+dfsg-1ubuntu4.25Not reportedUSN-3646-1Not reported
Ubuntuphp7.0deb16.047.0.30-0ubuntu0.16.04.1Not reportedUSN-3646-1Not reported
Ubuntuphp7.2deb18.047.2.5-0ubuntu0.18.04.1Not reportedUSN-3646-1Not reported
Debianphp7.0deb97.0.30-0+deb9u1Not reportedDSA-4240-1Not reported
Debianphp5deb85.6.36+dfsg-0+deb8u1Not reportedDLA-1397-1Not reported
Debianphp5deb75.4.45-0+deb7u14Not reportedDLA-1373-1Not reported
Susephp53rpmlinux enterprise software development kit 11 sp45.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp53rpmlinux enterprise point of sale 11 sp35.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp53rpmlinux enterprise server 11 sp3-ltss5.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp53rpmlinux enterprise server 11 sp3-teradata5.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp53rpmlinux enterprise server 11 sp45.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp53rpmlinux enterprise server for sap applications 11 sp45.3.17-112.23.1Not reportedSUSE-SU-2018:1294-1Not reported
Susephp5rpmlinux enterprise module for web and scripting 125.5.14-109.27.2Not reportedSUSE-SU-2018:1291-1Not reported
Susephp5rpmlinux enterprise software development kit 12 sp35.5.14-109.27.2Not reportedSUSE-SU-2018:1291-1Not reported
Susephp7rpmlinux enterprise module for web and scripting 127.0.7-50.38.2Not reportedSUSE-SU-2018:1176-1Not reported
Susephp7rpmlinux enterprise software development kit 12 sp37.0.7-50.38.2Not reportedSUSE-SU-2018:1176-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References