EulerOS 2.0 SP1 : php (EulerOS-SA-2016-1063)

This script is Copyright (C) 2017 Tenable Network Security, Inc.


Synopsis :

The remote EulerOS host is missing multiple security updates.

Description :

According to the versions of the php packages installed, the EulerOS
installation on the remote host is affected by the following
vulnerabilities :

- A flaw was found in the way certain error conditions
were handled by bzread() function in PHP. An attacker
could use this flaw to upload a specially crafted bz2
archive which, when parsed via the vulnerable function,
could cause the application to crash or execute
arbitrary code with the permissions of the user running
the PHP application.(CVE-2016-5399)

- An integer overflow flaw, leading to a heap-based
buffer overflow was found in the imagecreatefromgd2()
function of PHP's gd extension. A remote attacker could
use this flaw to crash a PHP application or execute
arbitrary code with the privileges of the user running
that PHP application using gd via a specially crafted
GD2 image.(CVE-2016-5766)

- An integer overflow flaw, leading to a heap-based
buffer overflow was found in the
gdImagePaletteToTrueColor() function of PHP's gd
extension. A remote attacker could use this flaw to
crash a PHP application or execute arbitrary code with
the privileges of the user running that PHP application
using gd via a specially crafted image
buffer.(CVE-2016-5767)

- A double free flaw was found in the
mb_ereg_replace_callback() function of php which is
used to perform regex search. This flaw could possibly
cause a PHP application to crash.(CVE-2016-5768)

Note that Tenable Network Security has extracted the preceding
description block directly from the EulerOS security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

See also :

http://www.nessus.org/u?245d9874

Solution :

Update the affected php packages.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS Temporal Score : 5.9
(CVSS2#E:POC/RL:OF/RC:ND)
Public Exploit Available : true

Family: Huawei Local Security Checks

Nessus Plugin ID: 99825 ()

Bugtraq ID:

CVE ID: CVE-2016-5399
CVE-2016-5766
CVE-2016-5767
CVE-2016-5768

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now