The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3902-1 advisory.

    It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker     could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9020,     CVE-2019-9024)

    It was discovered that the PHP PHAR module incorrectly handled certain filenames. A remote attacker could     possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9021)

    It was discovered that PHP incorrectly parsed certain DNS responses. A remote attacker could possibly use     this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04     LTS. (CVE-2019-9022)

    It was discovered that PHP incorrectly handled mbstring regular expressions. A remote attacker could     possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9023)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before     7.1.25, and 7.2.x before 7.2.13, a buffer over-read in     PHAR reading functions may allow an attacker to read     allocated or unallocated memory past the actual data     when trying to parse a .phar file. This is related to     phar_parse_pharfile in ext/phar/phar.c.(CVE-2018-20783)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. Invalid input to the function xmlrpc_decode()     can lead to an invalid memory access (heap out of     bounds read or read after free). This is related to     xml_elem_parse_buf in     ext/xmlrpc/libxmlrpc/xml_element.c.(CVE-2019-9020)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A heap-based buffer over-read in PHAR reading     functions in the PHAR extension may allow an attacker     to read allocated or unallocated memory past the actual     data when trying to parse the file name, a different     vulnerability than CVE-2018-20783. This is related to     phar_detect_phar_fname_ext in     ext/phar/phar.c.(CVE-2019-9021)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. A number of heap-based buffer over-read     instances are present in mbstring regular expression     functions when supplied with invalid multibyte data.
    These occur in ext/mbstring/oniguruma/regcomp.c,     ext/mbstring/oniguruma/regexec.c,     ext/mbstring/oniguruma/regparse.c,     ext/mbstring/oniguruma/enc/unicode.c, and     ext/mbstring/oniguruma/src/utf32_be.c when a multibyte     regular expression pattern contains invalid multibyte     sequences.(CVE-2019-9023)

  - An issue was discovered in PHP before 5.6.40, 7.x     before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1. xmlrpc_decode() can allow a hostile XMLRPC     server to cause PHP to read memory outside of allocated     areas in base64_decode_xmlrpc in     ext/xmlrpc/libxmlrpc/base64.c.(CVE-2019-9024)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php7 fixes the following issues :

Security issues fixed :

  - CVE-2019-9637: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128892).

  - CVE-2019-9675: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128886).

  - CVE-2019-9638: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension ((bsc#1128889).

  - CVE-2019-9639: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128887).

  - CVE-2019-9640: Fixed improper implementation of rename     function and multiple invalid memory access in EXIF     extension (bsc#1128883).

  - CVE-2019-9022: Fixed a vulnerability which could allow a     hostile DNS server to make PHP misuse memcpy     (bsc#1126827).

  - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode     function which could allow to a hostile XMLRPC server to     cause memory read outside the allocated areas     (bsc#1126821).

  - CVE-2019-9020: Fixed a heap out of bounds in     xmlrpc_decode function (bsc#1126711).

  - CVE-2018-20783: Fixed a buffer over-read in PHAR reading     functions which could allow an attacker to read     allocated and unallocated memory when parsing a phar     file (bsc#1127122).

  - CVE-2019-9021: Fixed a heap buffer-based buffer     over-read in PHAR reading functions which could allow an     attacker to read allocated and unallocated memory when     parsing a phar file (bsc#1126713).

  - CVE-2019-9023: Fixed multiple heap-based buffer     over-read instances in mbstring regular expression     functions (bsc#1126823).

  - CVE-2019-9641: Fixed multiple invalid memory access in     EXIF extension and improved insecure implementation of     rename function (bsc#1128722).

  - CVE-2018-19935: Fixed a Denial of Service in php_imap.c     which could be triggered via an empty string in the     message argument to imap_mail (bsc#1118832).

  - CVE-2019-11034: Fixed a heap-buffer overflow in     php_ifd_get32si() (bsc#1132838).

  - CVE-2019-11035: Fixed a heap-buffer overflow in     exif_iif_add_value() (bsc#1132837).

  - CVE-2019-11036: Fixed buffer over-read in     exif_process_IFD_TAG function leading to information     disclosure (bsc#1134322).

Other issue addressed :

  - Deleted README.default_socket_timeout which is not     needed anymore (bsc#1129032).

  - Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
122667	Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3902-1)	Nessus	Ubuntu Local Security Checks	2019/3/7	2025/9/3	critical
123620	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1146)	Nessus	Huawei Local Security Checks	2019/4/2	2024/6/6	critical
126034	openSUSE Security Update : php7 (openSUSE-2019-1572)	Nessus	SuSE Local Security Checks	2019/6/19	2024/5/15	critical

检测

插件搜索

critical

critical

critical