CVE-2018-10546

HIGH

PHP <5.6.36, <7.0.30, <7.1.17, <7.2.5 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-10546. PoCs published by dsfau.

AI-analyzed exploit summary This PoC demonstrates CVE-2018-10546, a CPU exhaustion vulnerability in PHP's stream filter 'convert.iconv.*' that causes an infinite loop when processing crafted data. The exploit uses a memory stream with a malformed filter chain to trigger the DoS condition.

Description

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences.

Exploits (1)

nomisec WORKING POC
by dsfau · poc
https://github.com/dsfau/CVE-2018-10546

This PoC demonstrates CVE-2018-10546, a CPU exhaustion vulnerability in PHP's stream filter 'convert.iconv.*' that causes an infinite loop when processing crafted data. The exploit uses a memory stream with a malformed filter chain to trigger the DoS condition.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: PHP (versions affected by CVE-2018-10546)
No auth needed
Prerequisites: PHP with affected 'convert.iconv.*' stream filter functionality
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/104019
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040807
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://bugs.php.net/bug.php?id=76249
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4240
Third Party Advisory x_refsource_confirm
https://www.tenable.com/security/tns-2018-12
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3646-1/
Patch, Vendor Advisory x_refsource_confirm
http://php.net/ChangeLog-5.php
Patch, Vendor Advisory x_refsource_confirm
http://php.net/ChangeLog-7.php
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201812-01
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20180607-0003/
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/06/msg00005.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2519

Scores

CVSS v3 7.5
EPSS 0.1056
EPSS Percentile 95.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-835
Status published
Products (8)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 17.10
canonical/ubuntu_linux 18.04
debian/debian_linux 8.0
debian/debian_linux 9.0
netapp/storage_automation_store
php/php < 5.6.36
Published Apr 29, 2018
Tracked Since Feb 18, 2026