CVE-2018-19935

ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.

We have discovered 2,096,601 live websites that are affected by CVE-2018-19935.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains2,096,601 live websites (29% of PHP install base)
Vulnerable Versions
  • from 5 through 6
  • from 7 through 7.3
Vulnerable Versions Count293 versions ( 57% of all versions)



Details

  • Published - Dec 7, 2018
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2018-19935
United States485,502 websites


Russia246,558 websites
France148,868 websites
Germany139,875 websites
Japan129,115 websites
Taiwan113,562 websites
Netherlands88,505 websites
China69,639 websites
GB54,279 websites
Italy46,617 websites

Website Distribution by TLD

Number of websites using CVE-2018-19935
.com834,138 websites
.ru265,227 websites
.de83,175 websites
.net67,991 websites
.nl61,826 websites
.org57,650 websites
.fr55,651 websites
.jp34,334 websites
.it33,558 websites
.co.uk33,314 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2018-19935

Top websites that are affected by CVE-2018-19935. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.org China***
*****.***********.com Canada***
**********.com United States***
************.ru Russia***
******************.com United States*,***
*.cn China*,***
***.org Italy*,***
*********.******.net United States*,***
****.com United States*,***
********.com United States*,***
See full domain list

FAQ

A total of 2,096,601 websites have been identified as vulnerable to CVE-2018-19935, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2018-19935 vulnerability.
PHP versions up to 7.3 are vulnerable to CVE-2018-19935.
CVE-2018-19935 is resolved in version 7.3 of PHP.