The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1186 advisory.

    - core: fix multipart/form-data request can use excessive       amount of CPU usage CVE-2015-4024
    - fix various functions accept paths with NUL character       CVE-2015-4025, CVE-2015-4026, #1213407
    - ftp: fix integer overflow leading to heap overflow when       reading FTP file listing CVE-2015-4022
    - phar: fix buffer over-read in metadata parsing CVE-2015-2783
    - phar: invalid pointer free() in phar_tar_process_metadata()       CVE-2015-3307
    - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
    - phar: fix memory corruption in phar_parse_tarfile caused by       empty entry file name CVE-2015-4021
    - pgsql: fix NULL pointer dereference CVE-2015-1352

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1066 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache     HTTP Server. The php54 packages provide a recent stable release of PHP with     the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a     number of additional utilities.

    The php54 packages have been upgraded to upstream version 5.4.40, which     provides a number of bug fixes over the version shipped in Red Hat Software     Collections 1. (BZ#1168193)

    The following security issues were fixed in the php54-php component:

    A flaw was found in the way the PHP module for the Apache httpd web server     handled pipelined requests. A remote attacker could use this flaw to     trigger the execution of a PHP script in a deinitialized interpreter,     causing it to crash or, possibly, execute arbitrary code. (CVE-2015-3330)

    An uninitialized pointer use flaw was found in PHP's Exif extension. A     specially crafted JPEG or TIFF file could cause a PHP application using the     exif_read_data() function to crash or, possibly, execute arbitrary code     with the privileges of the user running that PHP application.
    (CVE-2015-0232)

    Multiple flaws were discovered in the way PHP performed object     unserialization. Specially crafted input processed by the unserialize()     function could cause a PHP application to crash or, possibly, execute     arbitrary code. (CVE-2014-8142, CVE-2015-0231, CVE-2015-0273,     CVE-2015-2787, CVE-2015-4147, CVE-2015-4148)

    Multiple flaws were found in the way the way PHP's Phar extension parsed     Phar archives. A specially crafted archive could cause PHP to crash or,     possibly, execute arbitrary code when opened. (CVE-2015-2783,     CVE-2015-3307, CVE-2015-3329)

    A heap buffer overflow flaw was found in the enchant_broker_request_dict()     function of PHP's enchant extension. An attacker able to make a PHP     application enchant dictionaries could possibly cause it to crash.
    (CVE-2014-9705)

    A heap buffer overflow flaw was found in PHP's regular expression     extension. An attacker able to make PHP process a specially crafted regular     expression pattern could cause it to crash and possibly execute arbitrary     code. (CVE-2015-2305)

    A buffer over-read flaw was found in the GD library used by the PHP gd     extension. A specially crafted GIF file could cause a PHP application using     the imagecreatefromgif() function to crash. (CVE-2014-9709)

    A use-after-free flaw was found in PHP's phar (PHP Archive) extension.
    An attacker able to trigger certain error condition in phar archive     processing could possibly use this flaw to disclose certain portions of     server memory. (CVE-2015-2301)

    An ouf-of-bounds read flaw was found in the way the File Information     (fileinfo) extension processed certain Pascal strings. A remote attacker     could cause a PHP application to crash if it used fileinfo to identify the     type of the attacker-supplied file. (CVE-2014-9652)

    It was found that PHP move_uploaded_file() function did not properly handle     file names with a NULL character. A remote attacker could possibly use this     flaw to make a PHP script access unexpected files and bypass intended file     system access restrictions. (CVE-2015-2348)

    A flaw was found in the way PHP handled malformed source files when running     in CGI mode. A specially crafted PHP file could cause PHP CGI to crash.
    (CVE-2014-9427)

    The following security issue was fixed in the php54-php-pecl-zendopcache     component:

    A use-after-free flaw was found in PHP's OPcache extension. This flaw could     possibly lead to a disclosure of a portion of the server memory.
    (CVE-2015-1351)

    All php54 users are advised to upgrade to these updated packages, which     correct these issues. After installing the updated packages, the httpd     service must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
181083	Oracle Linux 7 : php55-php (ELSA-2015-1186)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	critical
193682	RHEL 6 / 7 : php54 (RHSA-2015:1066)	Nessus	Red Hat Local Security Checks	2024/4/21	2025/4/15	critical

检测

插件搜索

critical

critical