The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before     5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which     makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified     vectors. (CVE-2015-8867)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for php5 fixes the following issues :

  - CVE-2016-4073: A remote attacker could have caused     denial of service, or possibly execute arbitrary code,     due to incorrect handling of string length calculations     in mb_strcut() (bsc#977003)

  - CVE-2016-3074: Signedness vulnerability in bundled libgd     may have resulted in a heap overflow when processing     compressed gd2 data. (boo#976775)

  - CVE-2015-8867: The PHP function     openssl_random_pseudo_bytes() did not return     cryptographically secure random bytes (bsc#977005)

  - CVE-2016-4070: The libxml_disable_entity_loader()     setting was shared between threads, which could have     resulted in XML external entity injection and entity     expansion issues (bsc#976997)

  - CVE-2015-8866: A remote attacker could have caused     denial of service due to incorrect handling of large     strings in php_raw_url_encode() (bsc#976996)

  - CVE-2016-4071: A remote attacker could have caused     denial of service, or possibly execute arbitrary code,     due to incorrect handling of string formatting in     php_snmp_error() (bsc#977000)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
219493	Linux Distros Unpatched Vulnerability : CVE-2015-8867	Nessus	Misc.	2025/3/4	2025/8/18	high
131592	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	Nessus	Huawei Local Security Checks	2019/12/4	2023/4/25	critical
91071	openSUSE Security Update : php5 (openSUSE-2016-576)	Nessus	SuSE Local Security Checks	2016/5/12	2021/1/19	critical
137966	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	Nessus	Huawei Local Security Checks	2020/7/1	2023/4/25	critical

检测

插件搜索

high

critical

critical

critical