Debian Linux Security Advisory 2018-1 – Auke van Slooten discovered that PHP 5, an hypertext preprocessor, crashes (because of a NULL pointer dereference) when processing invalid XML-RPC requests.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/87444/dsa-2018-1.txt
Source: https://packetstormsecurity.com/files/87444/Debian-Linux-Security-Advisory-2018-1.html