このphp5の更新では、次の問題が修正されています：

修正されたセキュリティ問題：

CVE-2019-9024：敵対的なXMLRPCサーバーが割り当て領域外でメモリを読み取る可能性がある、xmlrpc_decode関数の脆弱性を修正しました（bsc#1126821）。

CVE-2019-9020：xmlrpc_decode関数の領域外ヒープを修正しました（bsc#1126711）。

CVE-2018-20783：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のバッファオーバーリードを修正しました（bsc#1127122）。

CVE-2019-9021：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のヒープバッファベースのバッファオーバーリードを修正しました（bsc#1126713）。

CVE-2019-9023：mbstringの正規表現関数における複数のヒープベースのバッファオーバーリードインスタンスを修正しました（bsc#1126823）。

CVE-2019-9641：EXIF拡張機能における複数の不正なメモリアクセスを修正し、rename関数の安全ではない実装を改善しました（bsc#1128722）。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

このphp5の更新では、以下の問題を修正します：

セキュリティの問題を修正： 	 

  - CVE-2019-9024：敵対的なXMLRPCサーバーが割り当て領域外でメモリを読み取る可能性がある、xmlrpc_decode関数の脆弱性を修正しました（bsc#1126821）。

  - CVE-2019-9020：xmlrpc_decode関数の領域外ヒープを修正しました（bsc#1126711）。

  - CVE-2018-20783：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のバッファオーバーリードを修正しました（bsc#1127122）。

  - CVE-2019-9021：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のヒープバッファベースのバッファオーバーリードを修正しました（bsc#1126713）。

  - CVE-2019-9023：mbstringの正規表現関数における複数のヒープベースのバッファオーバーリードインスタンスを修正しました（bsc#1126823）。

  - CVE-2019-9641：EXIF拡張機能における複数の不正なメモリアクセスを修正し、rename関数の安全ではない実装を改善しました（bsc#1128722）。

この更新はSUSEからインポートされました：SLE-12：更新プロジェクトを更新します。

このphp7の更新では、以下の問題を修正します：

修正されたセキュリティ問題：

  - CVE-2019-9637：rename関数の不適切な実装とEXIF拡張機能における複数の不正なメモリアクセスを修正しました（bsc#1128892）。

  - CVE-2019-9675：rename関数の不適切な実装とEXIF拡張機能における複数の不正なメモリアクセスを修正しました（bsc#1128886）。

  - CVE-2019-9638：rename関数の不適切な実装とEXIF拡張機能における複数の不正なメモリアクセスを修正しました（bsc#1128889）。

  - CVE-2019-9639：rename関数の不適切な実装とEXIF拡張機能における複数の不正なメモリアクセスを修正しました（bsc#1128887）。

  - CVE-2019-9640：rename関数の不適切な実装とEXIF拡張機能における複数の不正なメモリアクセスを修正しました（bsc#1128883）。

  - CVE-2019-9022：悪意のあるDNSサーバーがPHPにmemcpyを誤用させることができる脆弱性を修正しました（bsc#1126827）。

  - CVE-2019-9024：敵対的なXMLRPCサーバーが割り当て領域外でメモリを読み取る可能性がある、xmlrpc_decode関数の脆弱性を修正しました（bsc#1126821）。

  - CVE-2019-9020：xmlrpc_decode関数の領域外ヒープを修正しました（bsc#1126711）。

  - CVE-2018-20783：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のバッファオーバーリードを修正しました（bsc#1127122）。

  - CVE-2019-9021：pharファイルの解析時に攻撃者が割り当て済みまたは未割り当てのメモリを読み取る可能性がある、PHAR読み取り関数のヒープバッファベースのバッファオーバーリードを修正しました（bsc#1126713）。

  - CVE-2019-9023：mbstringの正規表現関数における複数のヒープベースのバッファオーバーリードインスタンスを修正しました（bsc#1126823）。

  - CVE-2019-9641：EXIF拡張機能における複数の不正なメモリアクセスを修正し、rename関数の安全ではない実装を改善しました（bsc#1128722）。

  - CVE-2018-19935：php_imap.cでのサービス拒否を修正しました。これは、imap_mailのmessage引数の空の文字列により引き起こされる可能性がありました（bsc#1118832）。

  - CVE-2019-11034：php_ifd_get32si()でのヒープバッファオーバーフローを修正しました（bsc#1132838）。

  - CVE-2019-11035：- exif_iif_add_value()でのヒープバッファオーバーフローを修正しました（bsc#1132837）。

  - CVE-2019-11036：情報漏洩を引き起こすexif_process_IFD_TAG()でのバッファオーバーリードを修正しました（bsc#1134322）

その他の対処された問題：

  - 不要になったREADME.default_socket_timeoutを削除しました（bsc#1129032）。

  - php7テストパッケージを有効化しました（bsc#1119396）。

この更新はSUSEからインポートされました：SLE-15：更新プロジェクトを更新します。

リモート Redhat Enterprise Linux 7 ホストに、RHSA-2019:2519 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - gd: 符号なし整数アンダーフロー _gdContributionsAlloc() (CVE-2016-10166)

  - php: php_pcre.c:php_pcre_replace_impl() の領域外アクセス (CVE-2017-9118)

  - php: mysqli_api.c:mysqli_real_escape_string() の整数オーバーフロー (CVE-2017-9120)

  - php: ext/standard/var_unserializer.re でのヒープメモリ解放後使用 (Use After Free) (CVE-2017-12932)

  - php: timelib_meridian() の境界外読み取り (CVE-2017-16642)

  - gd: gd_gif_in.c の gdImageCreateFromGifCtx() における無限ループ (CVE-2018-5711)

  - php: PHAR 404 ページでの折り返し型 XSS (CVE-2018-5712)

  - php: HTTP 応答の解析中の http_fopen_wrapper.c 内の php_stream_url_wrap_http_ex() におけるスタックベースのバッファアンダーリード (CVE-2018-7584)

  - php: ダンプ可能な FPM 子プロセスにより、opcache アクセスコントロールのバイパスが可能 (CVE-2018-10545)

  - php: 無効なシーケンスで convert.incov 付きのストリームフィルターを使用する際に ext/iconv/iconv.c での無限ループが、サービス拒否を引き起こします (CVE-2018-10546)

  - php: PHAR 403 および 404 エラーページでの折り返し型 XSS の脆弱性 (CVE-2018-10547)

  - php: ldap_get_dn の戻り値の不適切な処理による NULL ポインターデリファレンスにより、悪質な LDAP サーバーの返信により DoS が引き起こされる可能性があります (CVE-2018-10548)

  - php: 細工された JPEG データを読み取る際の ext/exif/exif.c: exif_read_data() の領域外読み取り (CVE-2018-10549)

  - php: exif: exif_process_IFD_in_MAKERNOTE() のバッファオーバーリード (CVE-2018-14851)

  - php: http_fopen_wrapper.c の atoi() 呼び出しで http_header_value が不適切に処理されました (CVE-2018-14884)

  - php: 「Transfer-Encoding: chunked」リクエストの本文を介する Apache2 コンポーネントのクロスサイトスクリプティング (XSS) の欠陥 (CVE-2018-17082)

  - php: PHAR 読み取り関数におけるバッファオーバーリード (CVE-2018-20783)

  - gd: gd_color_match.c の gdImageColorMatch() におけるヒープベースのバッファオーバーフロー (CVE-2019-6977)

  - php: xmlrpc_decode() 関数における無効なメモリーアクセス (CVE-2019-9020)

  - php: PHAR 読み取り関数におけるヒープベースのバッファオーバーリード (CVE-2019-9021)

  - php: 細工された DNS 応答を介した負の長さの memcpy (CVE-2019-9022)

  - php: mbstring 正規表現関数におけるヒープベースのバッファオーバーリード (CVE-2019-9023)

  - php: ext/xmlrpc/libxmlrpc/ base64.c 内の base64_decode_xmlrpc における領域外読み取り (CVE-2019-9024)

  - php: ファイルシステムでファイルの名前を変更すると、処理中に不適切なアクセスが許可される可能性があります (CVE-2019-9637)

  - php: exif_process_IFD_in_MAKERNOTE における初期化されていない読み取り (CVE-2019-9638、CVE-2019-9639)

  - php: exif_process_SOFn() における無効な読み取り (CVE-2019-9640)

  - php: 関数 exif_process_IFD_TAG() におけるヒープバッファオーバーフロー (CVE-2019-11034)

  - php: 関数 exif_iif_add_value() におけるヒープバッファオーバーフロー (CVE-2019-11035)

  - php: 情報漏洩を引き起こす exif_process_IFD_TAG() でのバッファオーバーリード (CVE-2019-11036)

  - gd: gdImageCreateFromXbm() 内の情報漏洩 (CVE-2019-11038)

  - php: iconv_mime_decode_headers() での整数オーバーフローによる領域外読み取り (CVE-2019-11039)

  - php: exif_read_data() におけるバッファオーバーリード (CVE-2019-11040)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A number of heap-based buffer over-read     instances are present in mbstring regular expression     functions when supplied with invalid multibyte data.
    These occur in ext/mbstring/oniguruma/regcomp.c,     ext/mbstring/oniguruma/regexec.c,     ext/mbstring/oniguruma/regparse.c,ext/mbstring/onigurum     a/enc/unicode.c, and     ext/mbstring/oniguruma/src/utf32_be.c when a multibyte     regular expression pattern contains invalid multibyte     sequences.i1/4^CVE-2019-9023i1/4%0

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC     server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in     ext/xmlrpc/libxmlrpc/base64.c.i1/4^CVE-2019-9024i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.14. It is, therefore, affected by multiple vulnerabilities:

  - An integer underflow condition exists in _gdContributionsAlloc   function in gd_interpolation.c. An unauthenticated, remote attacker   can have unspecified impact via vectors related to decrementing   the u variable. (CVE-2016-10166)

  - A denial of service (DoS) vulnerability exists in   ext/imap/php_imap.c. An unauthenticated, remote attacker can   exploit this issue, via an empty string in the message argument   to the imap_mail function, to cause the application to stop   responding. (CVE-2018-19935)

  - A heap-based buffer overflow exists in gdImageColorMatch in   gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5.
  An unauthenticated, remote attacker can exploit this via the   triggering of imagecolormatch calls with crafted image data, to   cause a denial of service condition or the execution of arbitrary   code. (CVE-2019-6977)

  - A heap-based buffer over-read exists in the xmlrpc_decode function   due to improper validation of input data. An unauthenticated, remote   attacker can exploit this, via a specially crafted request, to cause   a heap out-of-bounds read or read-after-free condition, which could   result in a complete system compromise. (CVE-2019-9020)

  - A heap-based buffer over-read exists in the PHAR reading functions   in the PHAR extension, due to improper implementation of memory   operations. An unauthenticated, remote attacker can exploit this,   via persuading a user to parse a specially crafted file name on the   targeted system, to disclose sensitive information. (CVE-2019-9021)

  - An information disclosure vulnerability exists in the   dns_get_record function due to improper parsing of DNS responses. An   unauthenticated, remote attacker can exploit this, via a specially   crafted DNS reply sent from a rogue DNS server to disclose   potentially sensitive information. (CVE-2019-9022)

  - Multiple heap-based buffer over-read instances exist in mbstring   regular expression functions due to improper implementation of   memory operations. An unauthenticated, remote attacker can exploit   this by sending a specially crafted regular expression that contains   multibyte sequences, to cause a condition that could allow the   attacker to completely compromise the target system. (CVE-2019-9023)

  - An out-of-bounds read error exists in the xmlrpc_decode function   due to improper implementation of memory operations. An   unauthenticated, remote attacker can exploit this, via a hostile   XMLRPC server to cause PHP to read from memory outside of allocated   areas. (CVE-2019-9024)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before     7.1.25, and 7.2.x before 7.2.13, a buffer over-read in     PHAR reading functions may allow an attacker to read     allocated or unallocated memory past the actual data     when trying to parse a .phar file. This is related to     phar_parse_pharfile in ext/phar/phar.c.(CVE-2018-20783)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. Invalid input to the function xmlrpc_decode()     can lead to an invalid memory access (heap out of     bounds read or read after free). This is related to     xml_elem_parse_buf in     ext/xmlrpc/libxmlrpc/xml_element.c.(CVE-2019-9020)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A heap-based buffer over-read in PHAR reading     functions in the PHAR extension may allow an attacker     to read allocated or unallocated memory past the actual     data when trying to parse the file name, a different     vulnerability than CVE-2018-20783. This is related to     phar_detect_phar_fname_ext in     ext/phar/phar.c.(CVE-2019-9021)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A number of heap-based buffer over-read     instances are present in mbstring regular expression     functions when supplied with invalid multibyte data.
    These occur in ext/mbstring/oniguruma/regcomp.c,     ext/mbstring/oniguruma/regexec.c,     ext/mbstring/oniguruma/regparse.c,     ext/mbstring/oniguruma/enc/unicode.c, and     ext/mbstring/oniguruma/src/utf32_be.c when a multibyte     regular expression pattern contains invalid multibyte     sequences.(CVE-2019-9023)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC     server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in     ext/xmlrpc/libxmlrpc/base64.c.(CVE-2019-9024)

  - gdImageColorMatch in gd_color_match.c in the GD     Graphics Library (aka LibGD) 2.2.5, as used in the     imagecolormatch function in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1, has a heap-based buffer overflow. This can be     exploited by an attacker who is able to trigger     imagecolormatch calls with crafted image     data.(CVE-2019-6977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before     7.1.25, and 7.2.x before 7.2.13, a buffer over-read in     PHAR reading functions may allow an attacker to read     allocated or unallocated memory past the actual data     when trying to parse a .phar file. This is related to     phar_parse_pharfile in ext/phar/phar.c.(CVE-2018-20783)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. Invalid input to the function xmlrpc_decode()     can lead to an invalid memory access (heap out of     bounds read or read after free). This is related to     xml_elem_parse_buf in     ext/xmlrpc/libxmlrpc/xml_element.c.(CVE-2019-9020)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A heap-based buffer over-read in PHAR reading     functions in the PHAR extension may allow an attacker     to read allocated or unallocated memory past the actual     data when trying to parse the file name, a different     vulnerability than CVE-2018-20783. This is related to     phar_detect_phar_fname_ext in     ext/phar/phar.c.(CVE-2019-9021)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A number of heap-based buffer over-read     instances are present in mbstring regular expression     functions when supplied with invalid multibyte data.
    These occur in ext/mbstring/oniguruma/regcomp.c,     ext/mbstring/oniguruma/regexec.c,     ext/mbstring/oniguruma/regparse.c,     ext/mbstring/oniguruma/enc/unicode.c, and     ext/mbstring/oniguruma/src/utf32_be.c when a multibyte     regular expression pattern contains invalid multibyte     sequences.(CVE-2019-9023)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC     server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in     ext/xmlrpc/libxmlrpc/base64.c.(CVE-2019-9024)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1112 advisory.

  - An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before     7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request     data of a request for a .phar file. NOTE: this vulnerability exists because of an incomplete fix for     CVE-2018-5712. (CVE-2018-10547)

  - An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before     7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.
    (CVE-2018-5712)

  - In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a     stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function     in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string. (CVE-2018-7584)

  - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c. (CVE-2019-9024)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3299 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: rh-php72-php (7.2.24). (BZ#1766603)

    Security Fix(es):

    * php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

    * gd: Unsigned integer underflow _gdContributionsAlloc() (CVE-2016-10166)

    * gd: Heap based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

    * php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

    * php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

    * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

    * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

    * php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

    * php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

    * php: Buffer over-read in exif_read_data() (CVE-2019-11040)

    * php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

    * php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

    * php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

    * php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

    * php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

    * php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

    * php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

    * php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

    * gd: Information disclosure in gdImageCreateFromXbm() (CVE-2019-11038)

    * php: heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

    * php: heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

* php: Reflected XSS on PHAR 404 page * php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response * php: Reflected XSS vulnerability on PHAR 403 and 404 error pages * php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2519 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    The following packages have been upgraded to a later upstream version: rh-php71-php (7.1.30). (BZ#1631672)

    Security Fix(es):

    * gd: Unsigned integer underflow _gdContributionsAlloc() (CVE-2016-10166)

    * php: Out of bounds access in php_pcre.c:php_pcre_replace_impl() (CVE-2017-9118)

    * php: Integer overflow in mysqli_api.c:mysqli_real_escape_string() (CVE-2017-9120)

    * php: Heap use after free in ext/standard/var_unserializer.re (CVE-2017-12932)

    * php: Reflected XSS in .phar 404 page (CVE-2018-5712)

    * php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing     HTTP response (CVE-2018-7584)

    * php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence     leads to denial-of-service (CVE-2018-10546)

    * php: Reflected XSS vulnerability on PHAR 403 and 404 error pages (CVE-2018-10547)

    * php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious     LDAP server reply (CVE-2018-10548)

    * php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c (CVE-2018-14884)

    * php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked'     request (CVE-2018-17082)

    * gd: Heap based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

    * php: Invalid memory access in function xmlrpc_decode() (CVE-2019-9020)

    * php: File rename across filesystems may allow unwanted access during processing (CVE-2019-9637)

    * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9638)

    * php: Uninitialized read in exif_process_IFD_in_MAKERNOTE (CVE-2019-9639)

    * php: Invalid read in exif_process_SOFn() (CVE-2019-9640)

    * php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

    * php: Buffer over-read in exif_read_data() (CVE-2019-11040)

    * php: Out-of-bound read in timelib_meridian() (CVE-2017-16642)

    * gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c (CVE-2018-5711)

    * php: Dumpable FPM child processes allow bypassing opcache access controls (CVE-2018-10545)

    * php: Out-of-bounds read in ext/exif/exif.c:exif_read_data() when reading crafted JPEG data     (CVE-2018-10549)

    * php: exif: Buffer over-read in exif_process_IFD_in_MAKERNOTE() (CVE-2018-14851)

    * php: Buffer over-read in PHAR reading functions (CVE-2018-20783)

    * php: Heap-based buffer over-read in PHAR reading functions (CVE-2019-9021)

    * php: memcpy with negative length via crafted DNS response (CVE-2019-9022)

    * php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

    * php: Out-of-bounds read in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c (CVE-2019-9024)

    * php: Heap buffer overflow in function exif_process_IFD_TAG() (CVE-2019-11034)

    * php: Heap buffer overflow in function exif_iif_add_value() (CVE-2019-11035)

    * php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure (CVE-2019-11036)

    * gd: Information disclosure in gdImageCreateFromXbm() (CVE-2019-11038)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for php5 fixes the following issues :

Security issues fixed :

CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).

CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).

CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).

CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).

CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).

CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php5 fixes the following issues :

Security issues fixed: &#9; 

  - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode     function which could allow to a hostile XMLRPC server to     cause memory read outside the allocated areas     (bsc#1126821).

  - CVE-2019-9020: Fixed a heap out of bounds in     xmlrpc_decode function (bsc#1126711).

  - CVE-2018-20783: Fixed a buffer over-read in PHAR reading     functions which could allow an attacker to read     allocated and unallocated memory when parsing a phar     file (bsc#1127122).

  - CVE-2019-9021: Fixed a heap buffer-based buffer     over-read in PHAR reading functions which could allow an     attacker to read allocated and unallocated memory when     parsing a phar file (bsc#1126713).

  - CVE-2019-9023: Fixed multiple heap-based buffer     over-read instances in mbstring regular expression     functions (bsc#1126823).

  - CVE-2019-9641: Fixed multiple invalid memory access in     EXIF extension and improved insecure implementation of     rename function (bsc#1128722).

This update was imported from the SUSE:SLE-12:Update update project.

This update for php7 fixes the following issues :

Security issues fixed :

  - CVE-2019-9637: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128892).

  - CVE-2019-9675: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128886).

  - CVE-2019-9638: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension ((bsc#1128889).

  - CVE-2019-9639: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128887).

  - CVE-2019-9640: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128883).

  - CVE-2019-9022: Fixed a vulnerability which could allow a     hostile DNS server to make PHP misuse memcpy     (bsc#1126827).

  - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode     function which could allow to a hostile XMLRPC server to     cause memory read outside the allocated areas     (bsc#1126821).

  - CVE-2019-9020: Fixed a heap out of bounds in     xmlrpc_decode function (bsc#1126711).

  - CVE-2018-20783: Fixed a buffer over-read in PHAR reading     functions which could allow an attacker to read     allocated and unallocated memory when parsing a phar     file (bsc#1127122).

  - CVE-2019-9021: Fixed a heap buffer-based buffer     over-read in PHAR reading functions which could allow an     attacker to read allocated and unallocated memory when     parsing a phar file (bsc#1126713).

  - CVE-2019-9023: Fixed multiple heap-based buffer     over-read instances in mbstring regular expression     functions (bsc#1126823).

  - CVE-2019-9641: Fixed multiple invalid memory access in     EXIF extension and improved insecure implementation of     rename function (bsc#1128722).

  - CVE-2018-19935: Fixed a Denial of Service in php_imap.c     which could be triggered via an empty string in the     message argument to imap_mail (bsc#1118832).

  - CVE-2019-11034: Fixed a heap-buffer overflow in     php_ifd_get32si() (bsc#1132838).

  - CVE-2019-11035: Fixed a heap-buffer overflow in     exif_iif_add_value() (bsc#1132837).

  - CVE-2019-11036: Fixed buffer over-read in     exif_process_IFD_TAG function leading to information     disclosure (bsc#1134322).

Other issue addressed :

  - Deleted README.default_socket_timeout which is not     needed anymore (bsc#1129032).

  - Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4067-1 advisory.

  - An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-     fpm master process restarts a child process in an endless loop when using program execution functions     (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master     process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as     demonstrated by an attack by a customer of a shared-hosting facility. (CVE-2015-9253)

  - The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to     string objects that result in a negative length, which allows remote attackers to cause a denial of     service (application crash) or possibly have unspecified other impact by leveraging a script's use of .=     with a long string. (CVE-2017-8923)

  - PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and     application crash) or possibly have unspecified other impact via a long string because of an Integer     overflow in mysqli_real_escape_string. (CVE-2017-9120)

  - Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can     result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image     can trigger double free. This vulnerability appears to have been fixed in after commit     ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5. (CVE-2018-1000222)

  - exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-     free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The     vulnerable code is reachable through the PHP exif_read_data function. (CVE-2018-12882)

  - exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before     7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read     and application crash) via a crafted JPEG file. (CVE-2018-14851)

  - The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before     7.2.10 allows XSS via the body of a Transfer-Encoding: chunked request, because the bucket brigade is     mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c. (CVE-2018-17082)

  - ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via an empty string in the message argument to the     imap_mail function. (CVE-2018-19935)

  - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read     in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual     data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.
    (CVE-2018-20783)

  - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and     7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may     lead to information disclosure or crash. (CVE-2019-11034)

  - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and     7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may     lead to information disclosure or crash. (CVE-2019-11035)

  - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and     7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may     lead to information disclosure or crash. (CVE-2019-11036)

  - Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x     below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may     lead to information disclosure or crash. (CVE-2019-11039)

  - When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in     PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with     data what will cause it to read past the allocated buffer. This may lead to information disclosure or     crash. (CVE-2019-11040)

  - When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in     PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with     data what will cause it to read past the allocated buffer. This may lead to information disclosure or     crash. (CVE-2019-11041, CVE-2019-11042)

  - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of     FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for     FCGI protocol data, thus opening the possibility of remote code execution. (CVE-2019-11043)

  - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts     filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security     vulnerabilities, e.g. in applications checking paths that the code is allowed to access. (CVE-2019-11045)

  - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some     systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with     string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can     read to disclosure of the content of some memory locations. (CVE-2019-11046)

  - When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in     PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what     will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    (CVE-2019-11047, CVE-2019-11050)

  - In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are     allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized     memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files     created by upload request. This potentially could lead to accumulation of uncleaned temporary files     exhausting the disk space on the target server. (CVE-2019-11048)

  - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of     bounds read or read after free). This is related to xml_elem_parse_buf in     ext/xmlrpc/libxmlrpc/xml_element.c. (CVE-2019-9020)

  - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker     to read allocated or unallocated memory past the actual data when trying to parse the file name, a     different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in     ext/phar/phar.c. (CVE-2019-9021)

  - An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2.
    dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse     memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr     in ext/standard/dns.c for DNS_CAA and DNS_ANY queries. (CVE-2019-9022)

  - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression     functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c,     ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c,     and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid     multibyte sequences. (CVE-2019-9023)

  - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c. (CVE-2019-9024)

  - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way     rename() across filesystems is implemented, it is possible that file being renamed is briefly available     with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
    (CVE-2019-9637)

  - An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before     7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the     maker_note->offset relationship to value_len. (CVE-2019-9638)

  - An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before     7.3.3. There is an Invalid Read in exif_process_SOFn. (CVE-2019-9640)

  - An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before     7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF. (CVE-2019-9641)

  - ** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3.
    phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor     indicates that the link value is used only when an archive contains a symlink, which currently cannot     happen: This issue allows theoretical compromise of security, but a practical attack is usually     impossible. (CVE-2019-9675)

  - When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x     below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read     past the allocated buffer. This may lead to information disclosure or crash. (CVE-2020-7059)

  - When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27,     7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function     mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or     crash. (CVE-2020-7060)

  - In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload     functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0     (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist     and encounter null pointer dereference, which would likely lead to a crash. (CVE-2020-7062)

  - In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive     using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all     access) even if the original files on the filesystem were with more restrictive permissions. This may     result in files having more lax permissions than intended when such archive is extracted. (CVE-2020-7063)

  - In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with     exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of     uninitialized memory. This could potentially lead to information disclosure or crash. (CVE-2020-7064)

  - In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers()     with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it.
    This may cause some software to make incorrect assumptions about the target of the get_headers() and     possibly send some information to a wrong server. (CVE-2020-7066)

  - In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files     using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to     a crash or information disclosure. (CVE-2020-7068)

  - In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used     with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can     lead to both decreased security and incorrect encryption data. (CVE-2020-7069)

  - In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing     incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like
    __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge     cookie which is supposed to be secure. See also CVE-2020-8184 for more information. (CVE-2020-7070)

  - In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like     filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may     lead to functions that rely on URL being valid to mis-parse the URL and produce wrong data as components     of the URL. (CVE-2020-7071)

  - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to     connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would     cause PHP to access a null pointer and thus cause a crash. (CVE-2021-21702)

  - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running     PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-     privileged users, it is possible for the child processes to access memory shared with the main process and     write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and     writes, which can be used to escalate privileges from local unprivileged user to the root user.
    (CVE-2021-21703)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO     driver extension, a malicious database server could cause crashes in various database functions, such as     getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed     correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.
    (CVE-2021-21704)

  - In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation     functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password     field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially     leading to other security implications - like contacting a wrong server or making a wrong access decision.
    (CVE-2021-21705)

  - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing     functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains     URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus     interpreting the filename differently from what the user intended, which may lead it to reading a     different file than intended. (CVE-2021-21707)

  - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres     database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to     free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of     service. (CVE-2022-31625)

  - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension     with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the     connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote     code execution vulnerability. (CVE-2022-31626)

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress     quines gzip files, resulting in an infinite loop. (CVE-2022-31628)

  - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site     attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or     `__Secure-` cookie by PHP applications. (CVE-2022-31629)

  - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface. (CVE-2022-37454)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
124190	SUSE SLES12セキュリティ更新プログラム：php5 (SUSE-SU-2019:0985-1)	Nessus	SuSE Local Security Checks	2019/4/19	2024/5/31	critical
124263	openSUSEセキュリティ更新プログラム：php5 (openSUSE-2019-1256)	Nessus	SuSE Local Security Checks	2019/4/24	2024/5/31	critical
126034	openSUSEセキュリティ更新プログラム：php7 (openSUSE-2019-1572)	Nessus	SuSE Local Security Checks	2019/6/19	2024/5/15	critical
194152	RHEL 7 : rh-php71-php (RHSA-2019:2519)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/6	critical
167950	SUSE SLES15 / openSUSE 15 セキュリティ更新: php7 (SUSE-SU-2022:4067-1)	Nessus	SuSE Local Security Checks	2022/11/19	2023/10/18	critical
123732	EulerOS Virtualization 2.5.3 : php (EulerOS-SA-2019-1264)	Nessus	Huawei Local Security Checks	2019/4/4	2024/6/5	critical
121353	PHP 7.2.x < 7.2.14 Multiple vulnerabilities.	Nessus	CGI abuses	2019/1/24	2025/5/26	critical
123113	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-1100)	Nessus	Huawei Local Security Checks	2019/3/26	2024/6/12	critical
123594	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1120)	Nessus	Huawei Local Security Checks	2019/4/2	2024/6/6	critical
135338	CentOS 7 : php (RHSA-2020:1112)	Nessus	CentOS Local Security Checks	2020/4/10	2024/10/9	critical
193829	RHEL 7 : rh-php72-php (RHSA-2019:3299)	Nessus	Red Hat Local Security Checks	2024/4/24	2024/11/6	critical
135827	Scientific Linux Security Update : php on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	2020/4/21	2024/3/15	critical
194152	RHEL 7 : rh-php71-php (RHSA-2019:2519)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/6	critical
124190	SUSE SLES12 Security Update : php5 (SUSE-SU-2019:0985-1)	Nessus	SuSE Local Security Checks	2019/4/19	2024/5/31	critical
124263	openSUSE Security Update : php5 (openSUSE-2019-1256)	Nessus	SuSE Local Security Checks	2019/4/24	2024/5/31	critical
126034	openSUSE Security Update : php7 (openSUSE-2019-1572)	Nessus	SuSE Local Security Checks	2019/6/19	2024/5/15	critical
167950	SUSE SLES15 Security Update : php7 (SUSE-SU-2022:4067-1)	Nessus	SuSE Local Security Checks	2022/11/19	2023/10/18	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical