An update for php is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es) :

* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The PHP project reports :

The PHP development team announces the immediate availability of PHP 7.3.11. This is a security release which also contains several bug fixes.

The PHP development team announces the immediate availability of PHP 7.2.24. This is a security release which also contains several bug fixes.

The PHP development team announces the immediate availability of PHP 7.1.33. This is a security release which also contains several bug fixes.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3736 advisory.

    php     [7.3.5-5]
    - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the php packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24     and 7.3.x below 7.3.11 in certain configurations of FPM     setup it is possible to cause FPM module to write past     allocated buffers into the space reserved for FCGI     protocol data, thus opening the possibility of remote     code execution.(CVE-2019-11043)

  - ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0     allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via an     empty string in the message argument to the imap_mail     function.(CVE-2018-19935)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php5 fixes the following issues :

Security issues fixed :

CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360).

CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).

CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).

CVE-2019-11045: Fixed an issue with the PHP DirectoryIterator class that accepts filenames with embedded \0 bytes (bsc#1159923).

CVE-2019-11046: Fixed an out-of-bounds read in bc_shift_addsub (bsc#1159924).

CVE-2019-11047: Fixed an information disclosure in exif_read_data (bsc#1159922).

CVE-2019-11050: Fixed a buffer over-read in the EXIF extension (bsc#1159927).

CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629).

CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 4.05, has php packages installed that are affected by a vulnerability:

  - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24     and 7.3.x below 7.3.11 in certain configurations of FPM     setup it is possible to cause FPM module to write past     allocated buffers into the space reserved for FCGI     protocol data, thus opening the possibility of remote     code execution. (CVE-2019-11043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for php is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es) :

* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2019:3735 advisory.

  - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of     FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for     FCGI protocol data, thus opening the possibility of remote code execution. (CVE-2019-11043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of PHP running on the remote web server is prior to 7.1.33, 7.2.x prior to 7.2.24, or 7.3.x prior to 7.3.11. It is, therefore, affected by a remote code execution vulnerability due to insufficient validation of user input. An unauthenticated, remote attacker can exploit this, by sending a specially crafted request, to cause the execution of arbitrary code by breaking the fastcgi_split_path_info directive.

ID	Name	Product	Family	Published	Updated	Severity
130474	CentOS 6 : php (CESA-2019:3287)	Nessus	CentOS Local Security Checks	11/4/2019	4/25/2023	critical
130617	FreeBSD : php -- env_path_info underflow in fpm_main.c can lead to RCE (6a7c2ab0-00dd-11ea-83ce-705a0f828759)	Nessus	FreeBSD Local Security Checks	11/7/2019	12/6/2022	critical
131271	Oracle Linux 8 : php:7.3 (ELSA-2019-3736)	Nessus	Oracle Linux Local Security Checks	11/25/2019	11/1/2024	critical
132812	EulerOS Virtualization for ARM 64 3.0.5.0 : php (EulerOS-SA-2020-1058)	Nessus	Huawei Local Security Checks	1/13/2020	4/25/2023	critical
134199	SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0522-1)	Nessus	SuSE Local Security Checks	3/2/2020	4/25/2023	critical
134323	NewStart CGSL MAIN 4.05 : php Vulnerability (NS-SA-2020-0018)	Nessus	NewStart CGSL Local Security Checks	3/8/2020	4/25/2023	critical
137966	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	Nessus	Huawei Local Security Checks	7/1/2020	4/25/2023	critical
144531	Virtuozzo 6 : php / php-bcmath / php-cli / php-common / php-dba / etc (VZLSA-2019-3287)	Nessus	Virtuozzo Local Security Checks	12/22/2020	4/25/2023	critical
185013	Rocky Linux 8 : php:7.2 (RLSA-2019:3735)	Nessus	Rocky Linux Local Security Checks	11/7/2023	12/22/2023	critical
701235	PHP < 7.1.33 / 7.2.x < 7.2.24 / 7.3.x < 7.3.11 Remote Code Execution	Nessus Network Monitor	Web Servers	11/12/2019	11/12/2019	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

high