{"id":"CVE-2018-19518","aliases":["ALPINE-CVE-2018-19518","AZL-37053","AZL-37158","BELL-CVE-2018-19518","CLSA-2026-1777540774","CLSA-2026-1777946242","DEBIAN-CVE-2018-19518","DLA-1608-1","DLA-1700-1","DLA-2866-1","DSA-4353-1","EUVD-2018-11207","GHSA-5qmr-54g6-4256","MGASA-2018-0484","SUSE-SU-2018:3986-1","SUSE-SU-2018:3988-1","SUSE-SU-2018:3995-1","UBUNTU-CVE-2018-19518","USN-4160-1"],"status":"published","title":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.96107,"percentile":0.99877,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-88"],"published":"2018-11-25T10:00:00Z","modified":"2026-11-05T05:36:30Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/php_imap_open_rce","title":"php imap_open Remote Code Execution","type":"exploit","platform":"Unix","date":"2018-10-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/php_imap_open_rce"},{"source":"exploitdb","id":"EDB-45914","title":"PHP imap_open - Remote Code Execution (Metasploit)","type":"remote","platform":"linux","date":"2018-11-29","verified":true,"url":"https://www.exploit-db.com/exploits/45914"},{"source":"pocgithub","id":"ensimag-security/CVE-2018-19518","title":"ensimag-security/CVE-2018-19518","date":"2018-12-31","url":"https://github.com/ensimag-security/CVE-2018-19518"},{"source":"pocgithub","id":"houqe/EXP_CVE-2018-19518","title":"houqe/EXP_CVE-2018-19518","date":"2023-04-15","url":"https://github.com/houqe/EXP_CVE-2018-19518"}],"fixes":[{"ecosystem":"Alpine:v3.7","package":"php7","fixed_in":["7.1.29-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"uw-imap","fixed_in":["8:2007f~dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"uw-imap","fixed_in":["8:2007f~dfsg-4+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"uw-imap","fixed_in":["8:2007f~dfsg-5+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"php","fixed_in":["5.6.39-1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","fixed_in":["5.3.17-112.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","fixed_in":["5.3.17-112.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","fixed_in":["5.3.17-112.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","fixed_in":["7.0.7-50.56.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","fixed_in":["7.0.7-50.56.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php7","fixed_in":["7.0.7-50.56.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","fixed_in":["5.5.14-109.45.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","fixed_in":["5.5.14-109.45.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","fixed_in":["5.5.14-109.45.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"php-imap","fixed_in":["5.4.6-0ubuntu5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"uw-imap","fixed_in":["8:2007f~dfsg-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","fixed_in":["7.0.33-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"uw-imap","fixed_in":["8:2007f~dfsg-4+deb8u1build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","fixed_in":["7.2.15-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"uw-imap","fixed_in":["8:2007f~dfsg-5ubuntu0.18.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.7","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.29-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2007f-27"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2007f-26"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-55.el6.tuxcare.els16"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.39+dfsg-0+deb8u1"}]}],"versions":["5.6.11+dfsg-1","5.6.12+dfsg-0+deb8u1","5.6.12+dfsg-1","5.6.13+dfsg-0+deb8u1","5.6.13+dfsg-1","5.6.13+dfsg-2","5.6.14+dfsg-0+deb8u1","5.6.14+dfsg-1","5.6.15+dfsg-1","5.6.16+dfsg-1","5.6.16+dfsg-2","5.6.16+dfsg-3","5.6.16+dfsg-4","5.6.17+dfsg-0+deb8u1","5.6.17+dfsg-1","5.6.17+dfsg-3","5.6.18+dfsg-1","5.6.19+dfsg-0+deb8u1","5.6.19+dfsg-1","5.6.19+dfsg-2","5.6.20+dfsg-0+deb8u1","5.6.20+dfsg-1","5.6.21+dfsg-1","5.6.21+dfsg-2","5.6.22+dfsg-0+deb8u1","5.6.22+dfsg-1","5.6.22+dfsg-2","5.6.23+dfsg-0+deb8u1","5.6.23+dfsg-1","5.6.24+dfsg-0+deb8u1","5.6.24+dfsg-1","5.6.26+dfsg-0+deb8u1","5.6.26+dfsg-1","5.6.27+dfsg-0+deb8u1","5.6.28+dfsg-0+deb8u1","5.6.29+dfsg-0+deb8u1","5.6.30+dfsg-0+deb8u1","5.6.33+dfsg-0+deb8u1","5.6.36+dfsg-0+deb8u1","5.6.37+dfsg-0+deb8u1","5.6.38+dfsg-0+deb8u1","5.6.7+dfsg-1","5.6.9+dfsg-0+deb8u1","5.6.9+dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-4+deb8u1"}]}],"versions":["8:2007f~dfsg-4"]},{"source":"osv","ecosystem":"Debian:9","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-5+deb9u1"}]}],"versions":["8:2007f~dfsg-5"]},{"source":"osv","ecosystem":"Debian:9","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0+deb9u1"}]}],"versions":["7.0.19-1","7.0.20-1","7.0.20-2","7.0.22-1","7.0.22-2","7.0.22-3","7.0.25-1","7.0.26-1","7.0.27-0+deb9u1","7.0.27-1","7.0.28-1","7.0.29-1","7.0.30-0+deb9u1","7.0.30-1","7.0.30-2","7.0.31-1","7.0.32-1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.39-1.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.56.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.56.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.56.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.45.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.45.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.45.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.6-0ubuntu5.1"}]}],"versions":["5.4.6-0ubuntu3","5.4.6-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-2ubuntu0.1~esm1"}]}],"versions":["8:2007e~dfsg-3.2ubuntu2","8:2007f~dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0ubuntu0.16.04.1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-4+deb8u1build0.16.04.1"}]}],"versions":["8:2007f~dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.15-0ubuntu0.18.04.1"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-5ubuntu0.18.04.2"}]}],"versions":["8:2007f~dfsg-5","8:2007f~dfsg-5build1","8:2007f~dfsg-5ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-4+deb8u1build0.16.04.1"}]}],"versions":["8:2007f~dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"uw-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:2007f~dfsg-5ubuntu0.18.04.2"}]}],"versions":["8:2007f~dfsg-5","8:2007f~dfsg-5build1","8:2007f~dfsg-5ubuntu0.18.04.1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"php","product":"php"},{"vendor":"uw-imap_project","product":"uw-imap"}],"references":[{"url":"https://bugs.php.net/bug.php?id=77160","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/45914/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181221-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1042157","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","web"]},{"url":"https://www.debian.org/security/2018/dsa-4353","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/exploit.php","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://bugs.debian.org/913835","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2018/11/22/3","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence","report"]},{"url":"https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5bfea64c81ae34816479bb05d17cdffe45adddb","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/106018","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","web"]},{"url":"https://bugs.php.net/bug.php?id=76428","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Vendor Advisory","evidence"]},{"url":"https://bugs.debian.org/913775","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugs.debian.org/913836","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://antichat.com/threads/463395/#post-4254681","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://bugs.php.net/bug.php?id=77153","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Vendor Advisory","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/12/msg00006.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4160-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-57","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00031.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19518","tags":["web"]},{"url":"https://git.php.net/?p=php-src.git;a=commit;h=e5bfea64c81ae34816479bb05d17cdffe45adddb"},{"url":"https://github.com/advisories/GHSA-5qmr-54g6-4256"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-19518","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-19518","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777540774.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777946242.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-19518","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0484.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23945","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183986-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1117107","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19518","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183988-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183995-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-19518","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4160-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19518","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:00:00Z","modified":"2024-08-05T11:37:11.529Z","updated_at":"2026-11-02T14:35:02.966615Z"}],"euvd":[{"id":"EUVD-2018-11207","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:00:00Z","modified":"2024-08-05T11:37:11Z","updated_at":"2026-11-03T02:39:33.35436Z"}],"ghsa":[{"id":"GHSA-5qmr-54g6-4256","title":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2022-05-13T01:02:14Z","modified":"2023-02-01T05:02:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:49:55.565803Z"}],"nvd":[{"id":"CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00.25Z","modified":"2026-06-17T01:49:25.907Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":8.5,"vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:04:48.987926Z"}],"osv":[{"id":"ALPINE-CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00.25Z","modified":"2026-11-03T06:31:26.612385177Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"AZL-37053","title":"CVE-2018-19518 affecting package uw-imap 2007f-27","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-37158","title":"CVE-2018-19518 affecting package uw-imap 2007f-26","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00Z","modified":"2026-04-21T04:28:14.516798Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2018-19518","title":"CVE-2018-19518 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:00.485783Z","modified":"2026-01-26T09:46:57.019223Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00.25Z","modified":"2026-10-24T10:30:24.933134677Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00.25Z","modified":"2026-10-23T18:03:03.427846023Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"UBUNTU-CVE-2018-19518","description":"University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.","status":"published","published":"2018-11-25T10:29:00Z","modified":"2026-04-22T11:50:45.176768Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"CLSA-2026-1777540774","title":"php: Fix of 4 CVEs","description":"- CVE-2018-14883: fix integer overflow leading to heap buffer overflow in exif_thumbnail_extract\n- CVE-2019-19246: fix heap buffer overflow in oniguruma str_lower_case_match\n- CVE-2018-19518: disable imap rsh/ssh by default to prevent argument injection (imap.enable_insecure_rsh INI added)\n- CVE-2018-20783: add buffer bounds checks to phar_parse_pharfile manifest reads","status":"published","published":"2026-05-02T00:53:09Z","modified":"2026-10-21T10:47:50.353729343Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777946242","title":"php: Fix of 13 CVEs","description":"- CVE-2018-14883: fix int overflow leading to heap overflow in exif_thumbnail_extract\n- CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD\n- CVE-2019-9022: fix memcpy with negative length via crafted DNS response\n- CVE-2019-9640: fix invalid read in exif_process_SOFn\n- CVE-2019-11042: fix heap buffer overflow in exif_process_user_comment\n- CVE-2019-9638, CVE-2019-9639: fix uninitialized read in\n  exif_process_IFD_in_MAKERNOTE (single upstream commit covers both)\n- CVE-2019-9637: safer rename() procedure to avoid permission leak on EXDEV\n  cross-filesystem fallback\n- CVE-2019-19246: fix Oniguruma out-of-bounds read in str_lower_case_match\n- CVE-2019-9024: fix xmlrpc base64 out-of-bounds read via unsigned char cast\n- CVE-2018-20783: fix phar_parse_pharfile buffer over-read via stricter\n  manifest bounds checks\n- CVE-2018-19518: disable rsh/ssh logins in imap_open by default\n  (new no_rsh/no_ssh INI entries)\n- CVE-2018-19935: fix imap_mail NULL pointer dereference on empty message\n  parameter","status":"published","published":"2026-05-05T01:57:28Z","modified":"2026-10-21T10:48:18.027864739Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-1608-1","title":"php5 - security update","status":"published","published":"2018-12-16T00:00:00Z","modified":"2026-03-09T01:19:41.72254Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-1700-1","title":"uw-imap - security update","status":"published","published":"2019-03-01T00:00:00Z","modified":"2026-03-09T01:22:26.979618Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2866-1","title":"uw-imap - security update","status":"published","published":"2021-12-29T00:00:00Z","modified":"2026-03-09T01:22:19.785891Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4353-1","title":"php7.0 - security update","status":"published","published":"2018-12-10T00:00:00Z","modified":"2026-03-09T02:09:05.866316Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0484","title":"Updated php packages fix security vulnerability","description":"Bypassing disabled exec functions in PHP via imap_open (CVE-2018-19518).\n","status":"published","published":"2018-12-20T20:17:27Z","modified":"2026-04-16T06:23:51.392122895Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2018:3986-1","title":"Recommended update for php53","description":"This update for php53 fixes the following issues:\n\nSecurity issue fixed:\n    \n- CVE-2018-19518: Fixed imap_open script injection flaw (bsc#1117107).\n","status":"published","published":"2018-12-05T13:44:37Z","modified":"2026-02-04T04:11:07.408914Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3988-1","title":"Recommended update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issue fixed:\n    \n- CVE-2018-19518: Fixed imap_open script injection flaw (bsc#1117107).\n","status":"published","published":"2018-12-05T13:46:42Z","modified":"2026-02-04T02:47:25.894694Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3995-1","title":"Recommended update for php5","description":"This update for php5 fixes the following issues:\n\nSecurity issue fixed:\n    \n- CVE-2018-19518: Fixed imap_open script injection flaw (bsc#1117107).\n","status":"published","published":"2018-12-06T08:41:04Z","modified":"2026-02-04T02:59:19.797309Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-4160-1","title":"uw-imap vulnerability","description":"It was discovered that UW IMAP incorrectly handled inputs. A remote attacker\ncould possibly use this issue to execute arbitrary OS commands.\n","status":"published","published":"2019-10-21T19:26:28Z","modified":"2026-04-22T10:00:31.658513Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}