php5 has been updated to fix two security issues :

  - Out of bounds read in mconvert(). (bnc#917150).
    (CVE-2014-9652)

  - Use after free vulnerability in unserialize() with     DateTimeZone. (bnc#918768). (CVE-2015-0273)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - php: buffer overflow in handling of long link names in tar phar archives (CVE-2016-2554)

  - php: Uninitialized read in exif_process_IFD_in_TIFF (CVE-2019-9641)

  - The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a     valid network IP address, which allows remote attackers to obtain network information and facilitate other     attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0.
    NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way     that is similar to strcpy's role in buffer overflows, in which case this would be a class of     implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a     security-relevant manner. (CVE-2006-4023)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

リモートホストは、GLSA-201606-10 で説明されている脆弱性の影響を受けます（PHP：複数の脆弱性）

PHP で複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

攻撃者が、任意のコードを実行したり、サービス拒否状態を引き起こしたりする可能性があります。
 回避策：

現時点で、既知の回避策はありません。

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - php: buffer overflow in handling of long link names in tar phar archives (CVE-2016-2554)

  - php: Uninitialized read in exif_process_IFD_in_TIFF (CVE-2019-9641)

  - The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a     valid network IP address, which allows remote attackers to obtain network information and facilitate other     attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0.
    NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way     that is similar to strcpy's role in buffer overflows, in which case this would be a class of     implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a     security-relevant manner. (CVE-2006-4023)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - php: buffer overflow in handling of long link names in tar phar archives (CVE-2016-2554)

  - php: Heap-based buffer over-read in mbstring regular expression functions (CVE-2019-9023)

  - Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to     hijack web sessions by specifying a session ID. (CVE-2011-4718)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

php5 已更新，修复了两个安全问题：

- mconvert() 中的越界读取。(bnc#917150)。
 (CVE-2014-9652)

- unserialize() 中 DateTimeZone 的释放后使用漏洞。(bnc#918768)。(CVE-2015-0273)

The remote host is affected by the vulnerability described in GLSA-201606-10 (PHP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PHP. Please review the       CVE identifiers referenced below for details.
  Impact :

    An attacker can possibly execute arbitrary code or create a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

php5 已更新，修正了兩個安全性問題：

- mconvert() 中有超出邊界讀取問題。(bnc#917150)。
 (CVE-2014-9652)

- unserialize() 中利用 DateTimeZone 引發的釋放後使用弱點。(bnc#918768)。(CVE-2015-0273)

远程主机受到 GLSA-201606-10 中所述漏洞的影响（PHP：多种漏洞）

已在 PHP 中发现多种漏洞。请检查下面引用的 CVE 标识符以了解详细信息。
 影响：

攻击者可能执行任意代码，或造成拒绝服务的情况。
 变通方案：

目前无任何已知的变通方案。

php5 が更新され、次の 2 つのセキュリティの問題が修正されました：

- mcovert() での領域外読み取り。（bnc#917150）。
 (CVE-2014-9652)

- DateTimeZone を伴う unserialize() の use-after-free の脆弱性。（bnc#918768）。(CVE-2015-0273)

遠端主機受到 GLSA-201606-10 中所述的弱點影響 (PHP：多個弱點)

在 PHP 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

攻擊者可能會執行任意程式碼，或產生拒絕服務情形。
 因應措施：

目前尚無已知的因應措施。

Versions of PHP 5.4.x earlier than 5.4.40, 5.5.x earlier than 5.5.24, or 5.6.x earlier than 5.6.8 contain a flaw in the cache directory that is due to the program creating files for the cache in a predictable manner. This may allow a remote attacker to inject WSDL files and have them be used in place of the intended file. Specifically, the default 'soap.wsdl_cache_dir' setting in 'php.ini-production' and 'php.ini-development' specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the 'get_sdl' function in 'ext/soap/php_sdl.c'.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
81665	SuSE 11.3 Security Update : PHP 5.3 (SAT Patch Number 10370)	Nessus	SuSE Local Security Checks	2015/3/6	2021/1/6	high
198485	RHEL 5 : php (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
91704	GLSA-201606-10：PHP：複数の脆弱性	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	critical
198558	RHEL 6 : php (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
198511	RHEL 7 : php (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
81665	SuSE 11.3 安全更新：PHP 5.3（SAT 修补程序编号 10370）	Nessus	SuSE Local Security Checks	2015/3/6	2021/1/6	high
91704	GLSA-201606-10 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	critical
81665	SuSE 11.3 安全性更新：PHP 5.3 (SAT 修補程式編號 10370)	Nessus	SuSE Local Security Checks	2015/3/6	2021/1/6	high
91704	GLSA-201606-10：PHP：多种漏洞	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	critical
81665	SuSE 11.3 セキュリティ更新：PHP 5.3（SAT パッチ番号 10370）	Nessus	SuSE Local Security Checks	2015/3/6	2021/1/6	high
91704	GLSA-201606-10：PHP：多個弱點	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	critical
8789	PHP 5.4.x < 5.4.40 / 5.5.x < 5.5.24 / 5.6.x < 5.6.8 'php_sdl.c' WSDL Injection	Nessus Network Monitor	Web Servers	2015/6/18	2019/3/6	medium

検出

プラグインの検索

high

critical

critical

critical

critical

high

critical

high

critical

high

critical

medium