FreeBSD : php -- multiple vulnerabilities (482d40cb-f9a3-11e5-92ce-002590263bf5)

high Nessus Plugin ID 90335

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

The PHP Group reports :

- Fileinfo :

- Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file).

- mbstring :

- Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut).

- Phar :

- Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name).

- SNMP :

- Fixed bug #71704 (php_snmp_error() Format String Vulnerability).

- Standard :

- Fixed bug #71798 (Integer Overflow in php_raw_url_encode).

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 90335

File Name: freebsd_pkg_482d40cbf9a311e592ce002590263bf5.nasl

Version: 2.3

Type: local

Family: FreeBSD Local Security Checks

Published: 4/5/2016

Updated: 1/4/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:php55, p-cpe:/a:freebsd:freebsd:php55-fileinfo, p-cpe:/a:freebsd:freebsd:php55-mbstring, p-cpe:/a:freebsd:freebsd:php55-phar, p-cpe:/a:freebsd:freebsd:php55-snmp, p-cpe:/a:freebsd:freebsd:php56, p-cpe:/a:freebsd:freebsd:php56-fileinfo, p-cpe:/a:freebsd:freebsd:php56-mbstring, p-cpe:/a:freebsd:freebsd:php56-phar, p-cpe:/a:freebsd:freebsd:php56-snmp, p-cpe:/a:freebsd:freebsd:php70, p-cpe:/a:freebsd:freebsd:php70-fileinfo, p-cpe:/a:freebsd:freebsd:php70-mbstring, p-cpe:/a:freebsd:freebsd:php70-phar, p-cpe:/a:freebsd:freebsd:php70-snmp, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 4/3/2016

Vulnerability Publication Date: 3/31/2016

Detections

Analytics