The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3766-1 advisory.

    It was discovered that PHP incorrectly handled restarting certain child processes when php-fpm is used. A     remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed     in Ubuntu 18.04 LTS. (CVE-2015-9253)

    It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could     possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2018-14851,     CVE-2018-14883)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Two vulnerabilities have been discovered in php5, a server-side, HTML-embedded scripting language. One (CVE-2018-14851) results in a potential denial of service (out-of-bounds read and application crash) via a crafted JPEG file. The other (CVE-2018-14883) is an Integer Overflow that leads to a heap-based buffer over-read.

Additionally, a previously introduced patch for CVE-2017-7272 was found to negatively affect existing PHP applications (#890266). As a result of the negative effects and the fact that the security team has marked the CVE in question as 'ignore,' the patch has been dropped.

For Debian 8 'Jessie', these problems have been fixed in version 5.6.37+dfsg-0+deb8u1.

We recommend that you upgrade your php5 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.31. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability.

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, and 7.1.x before 7.1.20, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.(CVE-2018-14851)

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, and 7.1.x before 7.1.20. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.(CVE-2018-14883)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is prior to 5.7.1. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.(CVE-2018-14851)

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.(CVE-2018-12882)

An issue was discovered in PHP 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.(CVE-2018-14883)

This update for php53 fixes the following issues :

The following security issues were fixed :

CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash.
(bsc#1103659)

CVE-2018-14883: Fixed an integer overflow leading to a heap-based buffer over-read in exif_thumbnail_extract of exif.c. (bsc#1103836)

CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: The EXIF module was susceptible to denial of service/information disclosure when parsing malformed images, the Apache module allowed cross-site-scripting via the body of a 'Transfer-Encoding: chunked' request and the IMAP extension performed insufficient input validation which can result in the execution of arbitrary shell commands in the imap_open() function and denial of service in the imap_mail() function.

ID	名稱	產品	系列	已發布	已更新	嚴重性
117539	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3766-1)	Nessus	Ubuntu Local Security Checks	2018/9/18	2024/8/27	high
112229	Debian DLA-1490-1 : php5 security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
111215	PHP 7.0.x < 7.0.31 Use After Free Arbitrary Code Execution in EXIF	Nessus	CGI abuses	2018/7/20	2025/5/26	critical
112093	Amazon Linux AMI : php56 / php70,php71 (ALAS-2018-1066)	Nessus	Amazon Linux Local Security Checks	2018/8/24	2024/8/14	high
117672	Tenable SecurityCenter < 5.7.1 Multiple Vulnerabilities (TNS-2018-12)	Nessus	Misc.	2018/9/24	2020/10/9	critical
112094	Amazon Linux AMI : php72 (ALAS-2018-1067)	Nessus	Amazon Linux Local Security Checks	2018/8/24	2024/8/14	critical
117449	SUSE SLES11 Security Update : php53 (SUSE-SU-2018:2681-1)	Nessus	SuSE Local Security Checks	2018/9/12	2024/8/8	high
119561	Debian DSA-4353-1 : php7.0 - security update	Nessus	Debian Local Security Checks	2018/12/11	2020/4/28	high

偵測

搜尋 Plugin

high

high

critical

high

critical

critical

high

high