CVE-2018-12882 Use after free in n/a
Attackers can trigger a use-after-free in PHP's exif extension via crafted image files, potentially leading to code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-12882?
CVE-2018-12882 is a critical use after free vulnerability in Canonical Ubuntu Linux, published on 26 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.
Weakness: CWE-416
Which versions are affected by CVE-2018-12882?
It affects 3 products.
Linux distribution packages (4)
php7 SUSE:Linux Enterprise Module for Web and Scripting 12 | All versions | 7.0.7-50.41.1 |
php7 SUSE:Linux Enterprise Module for Web and Scripting 15 | All versions | 7.2.5-4.3.1 |
php7 SUSE:Linux Enterprise Module for Web and Scripting 15 | All versions | 7.2.5-4.3.1 |
php7 SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 7.0.7-50.41.1 |
Products include Canonical Ubuntu Linux, Netapp Storage Automation Store, Php Php.
How do I fix CVE-2018-12882?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2018-12882 being exploited?
There is no known exploitation of CVE-2018-12882 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as GHSA-p666-3cc6-g2c6, SUSE-SU-2018:1886-1, SUSE-SU-2018:1936-1, SUSE-SU-2018:1936-2, UBUNTU-CVE-2018-12882, USN-3702-1 and 1 more.