Debian Linux Security Advisory 2018-1 - Auke van Slooten discovered that PHP 5, an hypertext preprocessor, crashes (because of a NULL pointer dereference) when processing invalid XML-RPC requests.
ad5028d259efd26fd2ab55dd73b13e22bdc1b8918da7c4f56a770b62385c6501