CVE-2018-10546

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	*	5.6.36 (excluding)
Php	Php	7.0.0 (including)	7.0.30 (excluding)
Php	Php	7.1.0 (including)	7.1.17 (excluding)
Php	Php	7.2.0 (including)	7.2.5 (excluding)
Red Hat Software Collections for Red Hat Enterprise Linux 7	RedHat	rh-php71-php-0:7.1.30-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS	RedHat	rh-php71-php-0:7.1.30-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS	RedHat	rh-php71-php-0:7.1.30-1.el7	*
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS	RedHat	rh-php71-php-0:7.1.30-1.el7	*
Php5	Ubuntu	esm-infra-legacy/trusty	*
Php5	Ubuntu	trusty	*
Php5	Ubuntu	trusty/esm	*
Php5	Ubuntu	upstream	*
Php7.0	Ubuntu	esm-infra/xenial	*
Php7.0	Ubuntu	upstream	*
Php7.0	Ubuntu	xenial	*
Php7.1	Ubuntu	artful	*
Php7.1	Ubuntu	upstream	*
Php7.2	Ubuntu	bionic	*
Php7.2	Ubuntu	devel	*
Php7.2	Ubuntu	esm-infra/bionic	*
Php7.2	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-10546
CWE	https://cwe.mitre.org/data/definitions/835.html

Loop with Unreachable Exit Condition ('Infinite Loop')

Weakness

Affected Software

References