Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2019-1572.NASL
HistoryJun 19, 2019 - 12:00 a.m.

openSUSE Security Update : php7 (openSUSE-2019-1572)

2019-06-1900:00:00
This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22
JSON

This update for php7 fixes the following issues :

Security issues fixed :

  • CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892).

  • CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886).

  • CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889).

  • CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887).

  • CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883).

  • CVE-2019-9022: Fixed a vulnerability which could allow a hostile DNS server to make PHP misuse memcpy (bsc#1126827).

  • CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821).

  • CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711).

  • CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122).

  • CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713).

  • CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823).

  • CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722).

  • CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).

  • CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838).

  • CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837).

  • CVE-2019-11036: Fixed buffer over-read in exif_process_IFD_TAG function leading to information disclosure (bsc#1134322).

Other issue addressed :

  • Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032).

  • Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2019-1572.
#
# The text description of this plugin is (C) SUSE LLC.
#

include("compat.inc");

if (description)
{
  script_id(126034);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/10");

  script_cve_id("CVE-2018-19935", "CVE-2018-20783", "CVE-2019-11034", "CVE-2019-11035", "CVE-2019-11036", "CVE-2019-9020", "CVE-2019-9021", "CVE-2019-9022", "CVE-2019-9023", "CVE-2019-9024", "CVE-2019-9637", "CVE-2019-9638", "CVE-2019-9639", "CVE-2019-9640", "CVE-2019-9641", "CVE-2019-9675");

  script_name(english:"openSUSE Security Update : php7 (openSUSE-2019-1572)");
  script_summary(english:"Check for the openSUSE-2019-1572 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for php7 fixes the following issues :

Security issues fixed :

  - CVE-2019-9637: Fixed improper implementation of rename
    function and multiple invalid memory access in EXIF
    extension (bsc#1128892).

  - CVE-2019-9675: Fixed improper implementation of rename
    function and multiple invalid memory access in EXIF
    extension (bsc#1128886).

  - CVE-2019-9638: Fixed improper implementation of rename
    function and multiple invalid memory access in EXIF
    extension ((bsc#1128889).

  - CVE-2019-9639: Fixed improper implementation of rename
    function and multiple invalid memory access in EXIF
    extension (bsc#1128887).

  - CVE-2019-9640: Fixed improper implementation of rename
    function and multiple invalid memory access in EXIF
    extension (bsc#1128883).

  - CVE-2019-9022: Fixed a vulnerability which could allow a
    hostile DNS server to make PHP misuse memcpy
    (bsc#1126827).

  - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode
    function which could allow to a hostile XMLRPC server to
    cause memory read outside the allocated areas
    (bsc#1126821).

  - CVE-2019-9020: Fixed a heap out of bounds in
    xmlrpc_decode function (bsc#1126711).

  - CVE-2018-20783: Fixed a buffer over-read in PHAR reading
    functions which could allow an attacker to read
    allocated and unallocated memory when parsing a phar
    file (bsc#1127122).

  - CVE-2019-9021: Fixed a heap buffer-based buffer
    over-read in PHAR reading functions which could allow an
    attacker to read allocated and unallocated memory when
    parsing a phar file (bsc#1126713).

  - CVE-2019-9023: Fixed multiple heap-based buffer
    over-read instances in mbstring regular expression
    functions (bsc#1126823).

  - CVE-2019-9641: Fixed multiple invalid memory access in
    EXIF extension and improved insecure implementation of
    rename function (bsc#1128722).

  - CVE-2018-19935: Fixed a Denial of Service in php_imap.c
    which could be triggered via an empty string in the
    message argument to imap_mail (bsc#1118832).

  - CVE-2019-11034: Fixed a heap-buffer overflow in
    php_ifd_get32si() (bsc#1132838).

  - CVE-2019-11035: Fixed a heap-buffer overflow in
    exif_iif_add_value() (bsc#1132837).

  - CVE-2019-11036: Fixed buffer over-read in
    exif_process_IFD_TAG function leading to information
    disclosure (bsc#1134322).

Other issue addressed :

  - Deleted README.default_socket_timeout which is not
    needed anymore (bsc#1129032).

  - Enabled php7 testsuite (bsc#1119396).

This update was imported from the SUSE:SLE-15:Update update project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1118832"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1119396"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1126711"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1126713"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1126821"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1126823"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1126827"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1127122"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128722"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128883"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128886"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128887"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128889"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1128892"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1129032"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1132837"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1132838"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1134322"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected php7 packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:apache2-mod_php7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:apache2-mod_php7-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-bcmath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-bcmath-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-bz2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-bz2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-calendar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-calendar-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ctype");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ctype-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-curl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-curl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-dba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-dba-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-dom");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-dom-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-embed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-embed-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-enchant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-enchant-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-exif");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-exif-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fastcgi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fastcgi-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fileinfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fileinfo-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-firebird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-firebird-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fpm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-fpm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ftp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ftp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gettext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gettext-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-gmp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-iconv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-iconv-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-intl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-intl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-json-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ldap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-ldap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-mbstring");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-mbstring-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-mysql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-mysql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-odbc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-odbc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-opcache");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-opcache-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-openssl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pcntl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pcntl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pdo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pdo-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pear");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pear-Archive_Tar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pgsql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-pgsql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-phar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-phar-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-posix");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-posix-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-readline");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-readline-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-shmop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-shmop-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-snmp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-soap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sockets");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sockets-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sodium");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sodium-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sqlite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sqlite-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvmsg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvmsg-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvsem");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvsem-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvshm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-sysvshm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-testresults");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-tidy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-tidy-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-tokenizer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-tokenizer-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-wddx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-wddx-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlreader");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlreader-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlrpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlrpc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlwriter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xmlwriter-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xsl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-xsl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-zip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-zip-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-zlib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-zlib-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.1");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/12/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/06/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/06/19");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.1", reference:"apache2-mod_php7-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"apache2-mod_php7-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-bcmath-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-bcmath-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-bz2-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-bz2-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-calendar-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-calendar-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ctype-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ctype-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-curl-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-curl-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-dba-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-dba-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-debugsource-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-devel-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-dom-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-dom-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-embed-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-embed-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-enchant-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-enchant-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-exif-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-exif-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fastcgi-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fastcgi-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fileinfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fileinfo-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-firebird-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-firebird-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fpm-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-fpm-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ftp-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ftp-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gd-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gd-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gettext-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gettext-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gmp-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-gmp-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-iconv-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-iconv-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-intl-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-intl-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-json-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-json-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ldap-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-ldap-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-mbstring-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-mbstring-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-mysql-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-mysql-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-odbc-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-odbc-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-opcache-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-opcache-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-openssl-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-openssl-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pcntl-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pcntl-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pdo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pdo-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pear-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pear-Archive_Tar-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pgsql-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-pgsql-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-phar-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-phar-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-posix-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-posix-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-readline-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-readline-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-shmop-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-shmop-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-snmp-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-snmp-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-soap-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-soap-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sockets-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sockets-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sodium-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sodium-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sqlite-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sqlite-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvmsg-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvmsg-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvsem-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvsem-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvshm-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-sysvshm-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-testresults-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-tidy-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-tidy-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-tokenizer-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-tokenizer-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-wddx-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-wddx-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlreader-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlreader-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlrpc-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlrpc-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlwriter-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xmlwriter-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xsl-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-xsl-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-zip-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-zip-debuginfo-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-zlib-7.2.5-lp151.6.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-zlib-debuginfo-7.2.5-lp151.6.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "apache2-mod_php7 / apache2-mod_php7-debuginfo / php7 / php7-bcmath / etc");
}
VendorProductVersionCPE
novellopensuseapache2-mod_php7p-cpe:/a:novell:opensuse:apache2-mod_php7
novellopensuseapache2-mod_php7-debuginfop-cpe:/a:novell:opensuse:apache2-mod_php7-debuginfo
novellopensusephp7p-cpe:/a:novell:opensuse:php7
novellopensusephp7-bcmathp-cpe:/a:novell:opensuse:php7-bcmath
novellopensusephp7-bcmath-debuginfop-cpe:/a:novell:opensuse:php7-bcmath-debuginfo
novellopensusephp7-bz2p-cpe:/a:novell:opensuse:php7-bz2
novellopensusephp7-bz2-debuginfop-cpe:/a:novell:opensuse:php7-bz2-debuginfo
novellopensusephp7-calendarp-cpe:/a:novell:opensuse:php7-calendar
novellopensusephp7-calendar-debuginfop-cpe:/a:novell:opensuse:php7-calendar-debuginfo
novellopensusephp7-ctypep-cpe:/a:novell:opensuse:php7-ctype
Rows per page:
1-10 of 1121

References

Related

suse 6
nessus 63
openvas 54
ibm 5
ubuntu 8
osv 10
debian 4
oraclelinux 1
redhat 3
almalinux 1
rocky 1
f5 4
amazon 2
fedora 5
cve 5
prion 5
alpinelinux 2
redhatcve 3
debiancve 6
freebsd 1
ubuntucve 3
veracode 4
hackerone 3
suse
suse
Security update for php7 (moderate)
2019-06-18 00:00:00
Security update for php7 (moderate)
2019-06-18 00:00:00
Security update for php7 (moderate)
2019-04-29 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:1461-1)
2019-06-12 00:00:00
openSUSE Security Update : php7 (openSUSE-2019-1573)
2019-06-19 00:00:00
openSUSE Security Update : php7 (openSUSE-2019-1293)
2019-04-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for php7 (openSUSE-SU-2019:1572-1)
2020-01-09 00:00:00
openSUSE: Security Advisory for php7 (openSUSE-SU-2019:1573-1)
2019-06-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1461-1)
2021-06-09 00:00:00
ibm
ibm
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabiltiies in PHP.
2020-01-27 16:55:56
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP
2023-12-07 22:45:07
Security Bulletin: API Connect's Developer Portal is impacted by vulnerabilities in PHP
2020-03-03 02:43:43
ubuntu
ubuntu
PHP vulnerabilities
2019-04-23 00:00:00
PHP vulnerabilities
2019-04-25 00:00:00
PHP vulnerabilities
2019-03-26 00:00:00
osv
osv
php7.0 - security update
2019-03-08 00:00:00
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
debian
debian
[SECURITY] [DLA 1741-1] php5 security update
2019-03-31 14:37:39
[SECURITY] [DSA 4398-1] php7.0 security update
2019-02-28 22:04:23
[SECURITY] [DLA 1803-1] php5 security update
2019-05-25 10:53:33
oraclelinux
oraclelinux
php:7.2 security, bug fix, and enhancement update
2020-05-05 00:00:00
redhat
redhat
(RHSA-2020:1624) Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
(RHSA-2019:3299) Critical: rh-php72-php security update
2019-11-01 12:22:19
(RHSA-2019:2519) Moderate: rh-php71-php security, bug fix, and enhancement update
2019-08-19 08:09:18
almalinux
almalinux
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
rocky
rocky
php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
f5
f5
K25544541 : PHP vulnerabilities CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, and CVE-2019-9641
2019-03-14 00:00:00
K50602063 : PHP vulnerability CVE-2019-9021
2019-02-28 00:00:00
K44590877 : PHP vulnerabilities CVE-2019-11034 and CVE-2019-11035
2019-05-14 00:00:00
amazon
amazon
Low: php71, php72, php73
2019-06-11 23:00:00
Medium: php71, php72, php73
2019-09-13 22:49:00
fedora
fedora
[SECURITY] Fedora 28 Update: php-7.2.18-1.fc28
2019-05-11 23:10:56
[SECURITY] Fedora 29 Update: php-7.2.18-1.fc29
2019-05-11 02:37:44
[SECURITY] Fedora 28 Update: php-7.2.17-1.fc28
2019-04-13 01:31:20
cve
cve
CVE-2019-9021
2019-02-22 23:29:00
CVE-2019-11036
2019-05-03 20:29:00
CVE-2018-19935
2018-12-07 09:29:00
prion
prion
Heap overflow
2019-02-22 23:29:00
Design/Logic Flaw
2019-02-21 19:29:00
Design/Logic Flaw
2019-02-22 23:29:00
alpinelinux
alpinelinux
CVE-2019-9021
2019-02-22 23:29:00
CVE-2019-11035
2019-04-18 17:29:00
redhatcve
redhatcve
CVE-2019-9021
2019-10-29 04:03:55
CVE-2018-19935
2020-03-30 14:17:07
CVE-2019-9641
2019-03-14 18:51:03
debiancve
debiancve
CVE-2019-9021
2019-02-22 23:29:00
CVE-2019-9641
2019-03-09 00:29:00
CVE-2018-20783
2019-02-21 19:29:00
freebsd
freebsd
PHP -- Multiple vulnerabilities in EXIF module
2019-04-04 00:00:00
ubuntucve
ubuntucve
CVE-2019-9021
2019-02-22 00:00:00
CVE-2019-9639
2019-03-08 00:00:00
CVE-2018-19935
2018-12-07 00:00:00
veracode
veracode
Information Disclosure
2019-08-20 00:10:41
Information Disclosure
2019-08-20 00:10:42
Denial Of Service (Dos)
2019-08-20 00:10:42
hackerone
hackerone
Internet Bug Bounty: heap buffer overflow in phar_detect_phar_fname_ext
2019-01-07 08:54:00
Internet Bug Bounty: Uninitialized read in exif_process_IFD_in_TIFF
2019-03-15 14:21:28
Internet Bug Bounty: Use after free and out of bounds read in xmlrpc_decode()
2019-01-11 10:10:08
JSON
Related for OPENSUSE-2019-1572.NASL
suse6nessus63openvas54ibm5ubuntu8osv10debian4oraclelinux1redhat3almalinux1rocky1f54amazon2fedora5cve5prion5alpinelinux2redhatcve3debiancve6freebsd1ubuntucve3veracode4hackerone3