ID de Prueba:	1.3.6.1.4.1.25623.1.0.123097
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2015-1135)
Resumen:	The remote host is missing an update for the 'php' package(s) announced via the ELSA-2015-1135 advisory.
Descripción:	Summary: The remote host is missing an update for the 'php' package(s) announced via the ELSA-2015-1135 advisory. Vulnerability Insight: [5.4.16-36] - fix more functions accept paths with NUL character #1213407 [5.4.16-35] - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accept paths with NUL character CVE-2015-4025, CVE-2015-4026, #1213407 - fileinfo: fix denial of service when processing a crafted file #1213442 - ftp: fix integer overflow leading to heap overflow when reading FTP file listing CVE-2015-4022 - phar: fix buffer over-read in metadata parsing CVE-2015-2783 - phar: invalid pointer free() in phar_tar_process_metadata() CVE-2015-3307 - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329 - phar: fix memory corruption in phar_parse_tarfile caused by empty entry file name CVE-2015-4021 - soap: fix type confusion through unserialize #1222538 - apache2handler: fix pipelined request executed in deinitialized interpreter under httpd 2.4 CVE-2015-3330 [5.4.16-34] - fix memory corruption in fileinfo module on big endian machines #1082624 - fix segfault in pdo_odbc on x86_64 #1159892 - fix segfault in gmp allocator #1154760 [5.4.16-33] - core: use after free vulnerability in unserialize() CVE-2014-8142 and CVE-2015-0231 - core: fix use-after-free in unserialize CVE-2015-2787 - core: fix NUL byte injection in file name argument of move_uploaded_file() CVE-2015-2348 - date: use after free vulnerability in unserialize CVE-2015-0273 - enchant: fix heap buffer overflow in enchant_broker_request_dict CVE-2014-9705 - exif: free called on uninitialized pointer CVE-2015-0232 - fileinfo: fix out of bounds read in mconvert CVE-2014-9652 - gd: fix buffer read overflow in gd_gif_in.c CVE-2014-9709 - phar: use after free in phar_object.c CVE-2015-2301 - soap: fix type confusion through unserialize [5.4.16-31] - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 [5.4.16-29] - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 - core: fix integer overflow in unserialize() CVE-2014-3669 - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670 [5.4.16-27] - gd: fix NULL pointer dereference in gdImageCreateFromXpm(). CVE-2014-2497 - gd: fix NUL byte injection in file names. CVE-2014-5120 - fileinfo: fix extensive backtracking in regular expression (incomplete fix for CVE-2013-7345). CVE-2014-3538 - fileinfo: fix mconvert incorrect handling of truncated pascal string size. CVE-2014-3478 - fileinfo: fix cdf_read_property_info (incomplete fix for CVE-2012-1571). CVE-2014-3587 - spl: fix use-after-free in ArrayIterator due to object change during sorting. CVE-2014-4698 - spl: fix use-after-free in SPL Iterators. CVE-2014-4670 - network: fix segfault in dns_get_record (incomplete fix for CVE-2014-4049). CVE-2014-3597 [5.4.16-25] - fix segfault after startup on aarch64 (#1107567) - compile php with -O3 on ppc64le (#1123499) Affected Software/OS: 'php' package(s) on Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8142 BugTraq ID: 71791 http://www.securityfocus.com/bid/71791 Debian Security Information: DSA-3117 (Google Search) http://www.debian.org/security/2014/dsa-3117 https://security.gentoo.org/glsa/201503-03 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 HPdes Security Advisory: HPSBUX03337 http://marc.info/?l=bugtraq&m=143403519711434&w=2 HPdes Security Advisory: SSRT102066 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html SuSE Security Announcement: SUSE-SU-2015:0365 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html SuSE Security Announcement: openSUSE-SU-2015:0325 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html Common Vulnerability Exposure (CVE) ID: CVE-2014-9652 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 72505 http://www.securityfocus.com/bid/72505 https://security.gentoo.org/glsa/201701-42 http://openwall.com/lists/oss-security/2015/02/05/12 SuSE Security Announcement: SUSE-SU-2015:0424 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html SuSE Security Announcement: SUSE-SU-2015:0436 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html SuSE Security Announcement: openSUSE-SU-2015:0440 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2014-9705 BugTraq ID: 73031 http://www.securityfocus.com/bid/73031 Debian Security Information: DSA-3195 (Google Search) http://www.debian.org/security/2015/dsa-3195 https://security.gentoo.org/glsa/201606-10 http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 https://www.htbridge.com/advisory/HTB23252 http://openwall.com/lists/oss-security/2015/03/15/6 RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html http://www.securitytracker.com/id/1031948 SuSE Security Announcement: SUSE-SU-2015:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0644 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html http://www.ubuntu.com/usn/USN-2535-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-9709 BugTraq ID: 73306 http://www.securityfocus.com/bid/73306 Debian Security Information: DSA-3215 (Google Search) http://www.debian.org/security/2015/dsa-3215 https://security.gentoo.org/glsa/201607-04 http://www.mandriva.com/security/advisories?name=MDVSA-2015:153 http://www.securitytracker.com/id/1033703 http://www.ubuntu.com/usn/USN-2987-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-0231 BugTraq ID: 72539 http://www.securityfocus.com/bid/72539 http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 Common Vulnerability Exposure (CVE) ID: CVE-2015-0232 BugTraq ID: 72541 http://www.securityfocus.com/bid/72541 Common Vulnerability Exposure (CVE) ID: CVE-2015-0273 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html BugTraq ID: 72701 http://www.securityfocus.com/bid/72701 http://www.securitytracker.com/id/1031945 Common Vulnerability Exposure (CVE) ID: CVE-2015-2301 BugTraq ID: 73037 http://www.securityfocus.com/bid/73037 Debian Security Information: DSA-3198 (Google Search) http://www.debian.org/security/2015/dsa-3198 http://www.securitytracker.com/id/1031949 Common Vulnerability Exposure (CVE) ID: CVE-2015-2348 BugTraq ID: 73434 http://www.securityfocus.com/bid/73434 http://www.securitytracker.com/id/1032484 SuSE Security Announcement: openSUSE-SU-2015:0684 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html http://www.ubuntu.com/usn/USN-2572-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2783 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 74239 http://www.securityfocus.com/bid/74239 Debian Security Information: DSA-3280 (Google Search) http://www.debian.org/security/2015/dsa-3280 RedHat Security Advisories: RHSA-2015:1186 http://rhn.redhat.com/errata/RHSA-2015-1186.html RedHat Security Advisories: RHSA-2015:1187 http://rhn.redhat.com/errata/RHSA-2015-1187.html http://www.securitytracker.com/id/1032146 SuSE Security Announcement: openSUSE-SU-2015:0855 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2015-2787 BugTraq ID: 73431 http://www.securityfocus.com/bid/73431 http://www.securitytracker.com/id/1032485 Common Vulnerability Exposure (CVE) ID: CVE-2015-3307 BugTraq ID: 74703 http://www.securityfocus.com/bid/74703 Common Vulnerability Exposure (CVE) ID: CVE-2015-3329 BugTraq ID: 74240 http://www.securityfocus.com/bid/74240 http://www.securitytracker.com/id/1032145 Common Vulnerability Exposure (CVE) ID: CVE-2015-3330 BugTraq ID: 74204 http://www.securityfocus.com/bid/74204 http://openwall.com/lists/oss-security/2015/04/17/7 Common Vulnerability Exposure (CVE) ID: CVE-2015-3411 BugTraq ID: 75255 http://www.securityfocus.com/bid/75255 http://www.securitytracker.com/id/1032709 Common Vulnerability Exposure (CVE) ID: CVE-2015-3412 BugTraq ID: 75250 http://www.securityfocus.com/bid/75250 Common Vulnerability Exposure (CVE) ID: CVE-2015-4021 BugTraq ID: 74700 http://www.securityfocus.com/bid/74700 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html RedHat Security Advisories: RHSA-2015:1219 http://rhn.redhat.com/errata/RHSA-2015-1219.html http://www.securitytracker.com/id/1032433 SuSE Security Announcement: openSUSE-SU-2015:0993 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2015-4022 BugTraq ID: 74902 http://www.securityfocus.com/bid/74902 Common Vulnerability Exposure (CVE) ID: CVE-2015-4024 BugTraq ID: 74903 http://www.securityfocus.com/bid/74903 http://www.securitytracker.com/id/1032432 Common Vulnerability Exposure (CVE) ID: CVE-2015-4025 BugTraq ID: 74904 http://www.securityfocus.com/bid/74904 http://www.securitytracker.com/id/1032431 Common Vulnerability Exposure (CVE) ID: CVE-2015-4026 BugTraq ID: 75056 http://www.securityfocus.com/bid/75056 Common Vulnerability Exposure (CVE) ID: CVE-2015-4147 BugTraq ID: 73357 http://www.securityfocus.com/bid/73357 http://openwall.com/lists/oss-security/2015/06/01/4 http://www.securitytracker.com/id/1032459 Common Vulnerability Exposure (CVE) ID: CVE-2015-4148 BugTraq ID: 75103 http://www.securityfocus.com/bid/75103 SuSE Security Announcement: openSUSE-SU-2015:1057 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-06/msg00028.html Common Vulnerability Exposure (CVE) ID: CVE-2015-4598 BugTraq ID: 75244 http://www.securityfocus.com/bid/75244 Debian Security Information: DSA-3344 (Google Search) http://www.debian.org/security/2015/dsa-3344 http://www.openwall.com/lists/oss-security/2015/06/16/12 Common Vulnerability Exposure (CVE) ID: CVE-2015-4599 BugTraq ID: 75251 http://www.securityfocus.com/bid/75251 Common Vulnerability Exposure (CVE) ID: CVE-2015-4600 BugTraq ID: 74413 http://www.securityfocus.com/bid/74413 Common Vulnerability Exposure (CVE) ID: CVE-2015-4601 BugTraq ID: 75246 http://www.securityfocus.com/bid/75246 Common Vulnerability Exposure (CVE) ID: CVE-2015-4602 BugTraq ID: 75249 http://www.securityfocus.com/bid/75249 Common Vulnerability Exposure (CVE) ID: CVE-2015-4603 BugTraq ID: 75252 http://www.securityfocus.com/bid/75252 Common Vulnerability Exposure (CVE) ID: CVE-2015-4604 BugTraq ID: 75241 http://www.securityfocus.com/bid/75241 Common Vulnerability Exposure (CVE) ID: CVE-2015-4605 BugTraq ID: 75233 http://www.securityfocus.com/bid/75233
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.