Updated php53 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.
(CVE-2014-3670)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
(CVE-2014-3710)

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.
(CVE-2014-3668)

The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security.

All php53 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.
(CVE-2014-3670)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
(CVE-2014-3710)

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.
(CVE-2014-3668)

After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

CVE-2014-3668

Fix bug #68027 - fix date parsing in XMLRPC lib

CVE-2014-3669

Fix bug #68044: Integer overflow in unserialize() (32-bits only)

CVE-2014-3670

Fix bug #68113 (Heap corruption in exif_thumbnail())

CVE-2014-3710

Fix bug #68283: fileinfo: out-of-bounds read in elf note headers

Additional bugfix

Fix null byte handling in LDAP bindings in ldap-fix.patch

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.2. It is, therefore, affected by the following vulnerabilities :

  - A buffer overflow error exists in the function     'mkgmtime' that can allow application crashes or     arbitrary code execution. (CVE-2014-3668)

  - An integer overflow error exists in the function     'unserialize' that can allow denial of service attacks.
    Note that this only affects 32-bit instances.
    (CVE-2014-3669)

  - A heap corruption error exists in the function     'exif_thumbnail' that can allow application crashes or     arbitrary code execution. (CVE-2014-3670)

  - An input-validation error exists in the cURL extension's     file 'ext/curl/interface.c' and NULL option handling     that can allow information disclosure. (Bug #68089)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201411-04 (PHP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PHP. Please review the       CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker can possibly execute arbitrary code or       create a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update fixes the following vulnerabilities in php :

  - Heap corruption issue in exif_thumbnail().
    (CVE-2014-3670)

  - Integer overflow in unserialize(). (CVE-2014-3669)

  - Xmlrpc ISO8601 date format parsing out-of-bounds read in     mkgmtime(). (CVE-2014-3668)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1767 advisory.

    - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
    - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
    - core: fix integer overflow in unserialize() CVE-2014-3669

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.
(CVE-2014-3670)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.
(CVE-2014-3710)

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.
(CVE-2014-3668)

The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security.

All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-004. It is, therefore, affected multiple vulnerabilities in the following components :

  - Apache
  - ATS
  - Certificate Trust Policy
  - CoreAnimation
  - FontParser
  - Graphics Driver
  - ImageIO
  - IOHIDFamily
  - Kernel
  - LaunchServices
  - Open Directory Client
  - OpenLDAP
  - OpenSSL
  - PHP
  - QuickLook
  - SceneKit
  - Security - Code SIgning
  - UniformTypeIdentifiers

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
78783	CentOS 5 : php53 (CESA-2014:1768)	Nessus	CentOS Local Security Checks	2014/11/3	2021/1/4	high
78852	Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20141030)	Nessus	Scientific Linux Local Security Checks	2014/11/4	2021/1/14	high
82239	Debian DLA-94-1 : php5 security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	high
78547	PHP 5.6.x < 5.6.2 Multiple Vulnerabilities	Nessus	CGI abuses	2014/10/17	2025/5/26	high
79080	GLSA-201411-04 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/11/10	2021/1/6	high
79307	SuSE 11.3 Security Update : php53 (SAT Patch Number 9916)	Nessus	SuSE Local Security Checks	2014/11/18	2021/1/19	high
78754	Oracle Linux 6 / 7 : php (ELSA-2014-1767)	Nessus	Oracle Linux Local Security Checks	2014/10/31	2024/10/23	medium
78782	CentOS 6 / 7 : php (CESA-2014:1767)	Nessus	CentOS Local Security Checks	2014/11/3	2021/1/4	high
82700	Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)	Nessus	MacOS X Local Security Checks	2015/4/10	2024/5/28	critical

检测

插件搜索

high

high

high

high

high

high

medium

high

critical