This update for php5 fixes the following security issues :

  - CVE-2016-6294: The locale_accept_from_http function in     ext/intl/locale/locale_methods.c did not properly     restrict calls to the ICU uloc_acceptLanguageFromHTTP     function, which allowed remote attackers to cause a     denial of service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long argument     (bsc#1035111).

  - CVE-2017-9227: A stack out-of-bounds read occurs in     mbc_enc_len() during regular expression searching.
    (bsc#1040883)

  - CVE-2017-9226: A heap out-of-bounds write or read occurs     in next_state_val() during regular expression     compilation. (bsc#1040889)

  - CVE-2017-9224: A stack out-of-bounds read occurs in     match_at() during regular expression searching.
    (bsc#1040891)

This update was imported from the SUSE:SLE-12:Update update project.

This update for php7 fixes the following security issues :

  - CVE-2017-9224: stack out-of-bounds read occurs in     match_at() could lead to Denial of service (bsc#1040891)

  - CVE-2017-9226: heap out-of-bounds write orread occurs in     next_state_val() could lead to Denial of     service(bsc#1040889)

  - CVE-2017-9227: stack out-of-bounds read in mbc_enc_len()     could lead to Denial of service (bsc#1040883)

  - CVE-2017-6441: The _zval_get_long_func_ex in     Zend/zend_operators.c in PHP allowed attackers to cause     a denial of service (NULL pointer dereference and     application crash) via crafted use of 'declare(ticks='     in a PHP script (bsc#1032155).

  - CVE-2016-6294: The locale_accept_from_http function in     ext/intl/locale/locale_methods.c did not properly     restrict calls to the ICU uloc_acceptLanguageFromHTTP     function, which allowed remote attackers to cause a     denial of service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long argument     (bsc#1035111).

This update was imported from the SUSE:SLE-12:Update update project.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3382-1 advisory.

    It was discovered that the PHP opcache created keys for files it cached based on their filepath. A local     attacker could possibly use this issue in a shared hosting environment to obtain sensitive information.
    This issue only affected Ubuntu 14.04 LTS. (CVE-2015-8994)

    It was discovered that the PHP URL parser incorrectly handled certain URI components. A remote attacker     could possibly use this issue to bypass hostname-specific URL checks. This issue only affected Ubuntu     14.04 LTS. (CVE-2016-10397)

    It was discovered that PHP incorrectly handled certain boolean parameters when unserializing data. A     remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service.
    This issue only affected Ubuntu 14.04 LTS. (CVE-2017-11143)

    Sebastian Li, Wei Lei, Xie Xiaofei, and Liu Yang discovered that PHP incorrectly handled the OpenSSL     sealing function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a     denial of service. (CVE-2017-11144)

    Wei Lei and Liu Yang discovered that the PHP date extension incorrectly handled memory. A remote attacker     could possibly use this issue to disclose sensitive information from the server. (CVE-2017-11145)

    It was discovered that PHP incorrectly handled certain PHAR archives. A remote attacker could use this     issue to cause PHP to crash or disclose sensitive information. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2017-11147)

    It was discovered that PHP incorrectly handled locale length. A remote attacker could possibly use this     issue to cause PHP to crash, resulting in a denial of service. (CVE-2017-11362)

    Wei Lei and Liu Yang discovered that PHP incorrectly handled parsing ini files. An attacker could possibly     use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2017-11628)

    It was discovered that PHP mbstring incorrectly handled certain regular expressions. A remote attacker     could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for php5 fixes the following security issues :

  - CVE-2016-6294: The locale_accept_from_http function in     ext/intl/locale/locale_methods.c did not properly     restrict calls to the ICU uloc_acceptLanguageFromHTTP     function, which allowed remote attackers to cause a     denial of service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long argument     (bsc#1035111).

  - CVE-2017-9227: A stack out-of-bounds read occurs in     mbc_enc_len() during regular expression searching.
    (bsc#1040883)

  - CVE-2017-9226: A heap out-of-bounds write or read occurs     in next_state_val() during regular expression     compilation. (bsc#1040889)

  - CVE-2017-9224: A stack out-of-bounds read occurs in     match_at() during regular expression searching.
    (bsc#1040891)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
101219	openSUSE Security Update : php5 (openSUSE-2017-764)	Nessus	SuSE Local Security Checks	2017/7/5	2021/1/19	critical
101287	openSUSE Security Update : php7 (openSUSE-2017-790)	Nessus	SuSE Local Security Checks	2017/7/7	2021/1/19	critical
102416	Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3382-1)	Nessus	Ubuntu Local Security Checks	2017/8/11	2024/8/27	critical
119999	SUSE SLES12 Security Update : php5 (SUSE-SU-2017:1662-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	critical

偵測

搜尋 Plugin

critical

critical

critical

critical