openSUSE Security Update : php7 (openSUSE-2019-1572)

Severity

Theme

openSUSE Security Update : php7 (openSUSE-2019-1572)

critical Nessus Plugin ID 126034

New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for php7 fixes the following issues :

Security issues fixed :

- CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).

- CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).

- CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).

- CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).

- CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).

- CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).

- CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).

- CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).

- CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).

- CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).

- CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).

- CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).

- CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).

- CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).

- CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).

- CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed :

- Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).

- Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

Solution

Update the affected php7 packages.

Plugin Details

Severity: Critical

ID: 126034

File Name: openSUSE-2019-1572.nasl

Version: 1.2

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 6/19/2019

Updated: 1/10/2020

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: E:U/RL:OF/RC:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:apache2-mod_php7, p-cpe:/a:novell:opensuse:apache2-mod_php7-debuginfo, p-cpe:/a:novell:opensuse:php7, p-cpe:/a:novell:opensuse:php7-bcmath, p-cpe:/a:novell:opensuse:php7-bcmath-debuginfo, p-cpe:/a:novell:opensuse:php7-bz2, p-cpe:/a:novell:opensuse:php7-bz2-debuginfo, p-cpe:/a:novell:opensuse:php7-calendar, p-cpe:/a:novell:opensuse:php7-calendar-debuginfo, p-cpe:/a:novell:opensuse:php7-ctype, p-cpe:/a:novell:opensuse:php7-ctype-debuginfo, p-cpe:/a:novell:opensuse:php7-curl, p-cpe:/a:novell:opensuse:php7-curl-debuginfo, p-cpe:/a:novell:opensuse:php7-dba, p-cpe:/a:novell:opensuse:php7-dba-debuginfo, p-cpe:/a:novell:opensuse:php7-debuginfo, p-cpe:/a:novell:opensuse:php7-debugsource, p-cpe:/a:novell:opensuse:php7-devel, p-cpe:/a:novell:opensuse:php7-dom, p-cpe:/a:novell:opensuse:php7-dom-debuginfo, p-cpe:/a:novell:opensuse:php7-embed, p-cpe:/a:novell:opensuse:php7-embed-debuginfo, p-cpe:/a:novell:opensuse:php7-enchant, p-cpe:/a:novell:opensuse:php7-enchant-debuginfo, p-cpe:/a:novell:opensuse:php7-exif, p-cpe:/a:novell:opensuse:php7-exif-debuginfo, p-cpe:/a:novell:opensuse:php7-fastcgi, p-cpe:/a:novell:opensuse:php7-fastcgi-debuginfo, p-cpe:/a:novell:opensuse:php7-fileinfo, p-cpe:/a:novell:opensuse:php7-fileinfo-debuginfo, p-cpe:/a:novell:opensuse:php7-firebird, p-cpe:/a:novell:opensuse:php7-firebird-debuginfo, p-cpe:/a:novell:opensuse:php7-fpm, p-cpe:/a:novell:opensuse:php7-fpm-debuginfo, p-cpe:/a:novell:opensuse:php7-ftp, p-cpe:/a:novell:opensuse:php7-ftp-debuginfo, p-cpe:/a:novell:opensuse:php7-gd, p-cpe:/a:novell:opensuse:php7-gd-debuginfo, p-cpe:/a:novell:opensuse:php7-gettext, p-cpe:/a:novell:opensuse:php7-gettext-debuginfo, p-cpe:/a:novell:opensuse:php7-gmp, p-cpe:/a:novell:opensuse:php7-gmp-debuginfo, p-cpe:/a:novell:opensuse:php7-iconv, p-cpe:/a:novell:opensuse:php7-iconv-debuginfo, p-cpe:/a:novell:opensuse:php7-intl, p-cpe:/a:novell:opensuse:php7-intl-debuginfo, p-cpe:/a:novell:opensuse:php7-json, p-cpe:/a:novell:opensuse:php7-json-debuginfo, p-cpe:/a:novell:opensuse:php7-ldap, p-cpe:/a:novell:opensuse:php7-ldap-debuginfo, p-cpe:/a:novell:opensuse:php7-mbstring, p-cpe:/a:novell:opensuse:php7-mbstring-debuginfo, p-cpe:/a:novell:opensuse:php7-mysql, p-cpe:/a:novell:opensuse:php7-mysql-debuginfo, p-cpe:/a:novell:opensuse:php7-odbc, p-cpe:/a:novell:opensuse:php7-odbc-debuginfo, p-cpe:/a:novell:opensuse:php7-opcache, p-cpe:/a:novell:opensuse:php7-opcache-debuginfo, p-cpe:/a:novell:opensuse:php7-openssl, p-cpe:/a:novell:opensuse:php7-openssl-debuginfo, p-cpe:/a:novell:opensuse:php7-pcntl, p-cpe:/a:novell:opensuse:php7-pcntl-debuginfo, p-cpe:/a:novell:opensuse:php7-pdo, p-cpe:/a:novell:opensuse:php7-pdo-debuginfo, p-cpe:/a:novell:opensuse:php7-pear, p-cpe:/a:novell:opensuse:php7-pear-Archive_Tar, p-cpe:/a:novell:opensuse:php7-pgsql, p-cpe:/a:novell:opensuse:php7-pgsql-debuginfo, p-cpe:/a:novell:opensuse:php7-phar, p-cpe:/a:novell:opensuse:php7-phar-debuginfo, p-cpe:/a:novell:opensuse:php7-posix, p-cpe:/a:novell:opensuse:php7-posix-debuginfo, p-cpe:/a:novell:opensuse:php7-readline, p-cpe:/a:novell:opensuse:php7-readline-debuginfo, p-cpe:/a:novell:opensuse:php7-shmop, p-cpe:/a:novell:opensuse:php7-shmop-debuginfo, p-cpe:/a:novell:opensuse:php7-snmp, p-cpe:/a:novell:opensuse:php7-snmp-debuginfo, p-cpe:/a:novell:opensuse:php7-soap, p-cpe:/a:novell:opensuse:php7-soap-debuginfo, p-cpe:/a:novell:opensuse:php7-sockets, p-cpe:/a:novell:opensuse:php7-sockets-debuginfo, p-cpe:/a:novell:opensuse:php7-sodium, p-cpe:/a:novell:opensuse:php7-sodium-debuginfo, p-cpe:/a:novell:opensuse:php7-sqlite, p-cpe:/a:novell:opensuse:php7-sqlite-debuginfo, p-cpe:/a:novell:opensuse:php7-sysvmsg, p-cpe:/a:novell:opensuse:php7-sysvmsg-debuginfo, p-cpe:/a:novell:opensuse:php7-sysvsem, p-cpe:/a:novell:opensuse:php7-sysvsem-debuginfo, p-cpe:/a:novell:opensuse:php7-sysvshm, p-cpe:/a:novell:opensuse:php7-sysvshm-debuginfo, p-cpe:/a:novell:opensuse:php7-testresults, p-cpe:/a:novell:opensuse:php7-tidy, p-cpe:/a:novell:opensuse:php7-tidy-debuginfo, p-cpe:/a:novell:opensuse:php7-tokenizer, p-cpe:/a:novell:opensuse:php7-tokenizer-debuginfo, p-cpe:/a:novell:opensuse:php7-wddx, p-cpe:/a:novell:opensuse:php7-wddx-debuginfo, p-cpe:/a:novell:opensuse:php7-xmlreader, p-cpe:/a:novell:opensuse:php7-xmlreader-debuginfo, p-cpe:/a:novell:opensuse:php7-xmlrpc, p-cpe:/a:novell:opensuse:php7-xmlrpc-debuginfo, p-cpe:/a:novell:opensuse:php7-xmlwriter, p-cpe:/a:novell:opensuse:php7-xmlwriter-debuginfo, p-cpe:/a:novell:opensuse:php7-xsl, p-cpe:/a:novell:opensuse:php7-xsl-debuginfo, p-cpe:/a:novell:opensuse:php7-zip, p-cpe:/a:novell:opensuse:php7-zip-debuginfo, p-cpe:/a:novell:opensuse:php7-zlib, p-cpe:/a:novell:opensuse:php7-zlib-debuginfo, cpe:/o:novell:opensuse:15.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 6/18/2019

Vulnerability Publication Date: 12/7/2018

Reference Information

CVE: CVE-2018-19935, CVE-2018-20783, CVE-2019-11034, CVE-2019-11035, CVE-2019-11036, CVE-2019-9020, CVE-2019-9021, CVE-2019-9022, CVE-2019-9023, CVE-2019-9024, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, CVE-2019-9641, CVE-2019-9675