Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2019-0988-1.NASL
HistoryApr 24, 2019 - 12:00 a.m.

SUSE SLES12 Security Update : php72 (SUSE-SU-2019:0988-1)

2019-04-2400:00:00
This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
8
JSON

This update for php72 fixes the following issues :

CVE-2019-9637: Due to the way rename() across filesystems is implemented, it was possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data. (bsc#1128892)

CVE-2019-9675: phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: ‘This issue allows theoretical compromise of security, but a practical attack is usually impossible.’ (bsc#1128886)

CVE-2019-9638: An issue was discovered in the EXIF component in PHP.
There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len. (bsc#1128889)

CVE-2019-9639: An issue was discovered in the EXIF component in PHP.
There was an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable. (bsc#1128887)

CVE-2019-9640: An issue was discovered in the EXIF component in PHP.
There was an Invalid Read in exif_process_SOFn. (bsc#1128883)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:0988-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(124268);
  script_version("1.4");
  script_cvs_date("Date: 2020/01/23");

  script_cve_id("CVE-2019-9637", "CVE-2019-9638", "CVE-2019-9639", "CVE-2019-9640", "CVE-2019-9675");

  script_name(english:"SUSE SLES12 Security Update : php72 (SUSE-SU-2019:0988-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for php72 fixes the following issues :

CVE-2019-9637: Due to the way rename() across filesystems is
implemented, it was possible that file being renamed is briefly
available with wrong permissions while the rename is ongoing, thus
enabling unauthorized users to access the data. (bsc#1128892)

CVE-2019-9675: phar_tar_writeheaders_int in ext/phar/tar.c has a
buffer overflow via a long link value. NOTE: The vendor indicates that
the link value is used only when an archive contains a symlink, which
currently cannot happen: 'This issue allows theoretical compromise of
security, but a practical attack is usually impossible.' (bsc#1128886)

CVE-2019-9638: An issue was discovered in the EXIF component in PHP.
There was an uninitialized read in exif_process_IFD_in_MAKERNOTE
because of mishandling the maker_note->offset relationship to
value_len. (bsc#1128889)

CVE-2019-9639: An issue was discovered in the EXIF component in PHP.
There was an uninitialized read in exif_process_IFD_in_MAKERNOTE
because of mishandling the data_len variable. (bsc#1128887)

CVE-2019-9640: An issue was discovered in the EXIF component in PHP.
There was an Invalid Read in exif_process_SOFn. (bsc#1128883)

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1128883"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1128886"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1128887"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1128889"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1128892"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-9637/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-9638/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-9639/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-9640/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-9675/"
  );
  # https://www.suse.com/support/update/announcement/2019/suse-su-20190988-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?841c339a"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Software Development Kit 12-SP4:zypper in -t
patch SUSE-SLE-SDK-12-SP4-2019-988=1

SUSE Linux Enterprise Software Development Kit 12-SP3:zypper in -t
patch SUSE-SLE-SDK-12-SP3-2019-988=1

SUSE Linux Enterprise Module for Web Scripting 12:zypper in -t patch
SUSE-SLE-Module-Web-Scripting-12-2019-988=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:apache2-mod_php72");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:apache2-mod_php72-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-bcmath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-bcmath-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-bz2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-bz2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-calendar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-calendar-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ctype");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ctype-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-curl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-curl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-dba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-dba-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-dom");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-dom-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-enchant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-enchant-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-exif");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-exif-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fastcgi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fastcgi-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fileinfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fileinfo-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fpm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-fpm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ftp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ftp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gettext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gettext-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-gmp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-iconv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-iconv-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-imap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-imap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-intl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-intl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-json-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ldap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-ldap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-mbstring");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-mbstring-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-mysql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-mysql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-odbc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-odbc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-opcache");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-opcache-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-openssl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pcntl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pcntl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pdo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pdo-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pgsql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pgsql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-phar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-phar-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-posix");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-posix-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pspell");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-pspell-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-readline");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-readline-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-shmop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-shmop-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-snmp-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-soap-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sockets");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sockets-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sqlite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sqlite-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvmsg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvmsg-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvsem");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvsem-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvshm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-sysvshm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-tidy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-tidy-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-tokenizer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-tokenizer-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-wddx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-wddx-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlreader");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlreader-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlrpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlrpc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlwriter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xmlwriter-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xsl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-xsl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-zip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-zip-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-zlib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:php72-zlib-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/03/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/04/23");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/04/24");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP0", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"0", reference:"apache2-mod_php72-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"apache2-mod_php72-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-bcmath-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-bcmath-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-bz2-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-bz2-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-calendar-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-calendar-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ctype-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ctype-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-curl-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-curl-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-dba-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-dba-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-debugsource-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-dom-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-dom-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-enchant-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-enchant-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-exif-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-exif-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fastcgi-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fastcgi-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fileinfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fileinfo-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fpm-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-fpm-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ftp-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ftp-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gd-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gd-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gettext-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gettext-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gmp-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-gmp-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-iconv-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-iconv-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-imap-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-imap-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-intl-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-intl-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-json-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-json-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ldap-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-ldap-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-mbstring-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-mbstring-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-mysql-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-mysql-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-odbc-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-odbc-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-opcache-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-opcache-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-openssl-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-openssl-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pcntl-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pcntl-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pdo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pdo-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pgsql-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pgsql-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-phar-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-phar-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-posix-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-posix-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pspell-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-pspell-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-readline-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-readline-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-shmop-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-shmop-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-snmp-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-snmp-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-soap-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-soap-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sockets-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sockets-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sqlite-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sqlite-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvmsg-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvmsg-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvsem-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvsem-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvshm-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-sysvshm-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-tidy-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-tidy-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-tokenizer-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-tokenizer-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-wddx-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-wddx-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlreader-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlreader-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlrpc-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlrpc-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlwriter-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xmlwriter-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xsl-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-xsl-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-zip-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-zip-debuginfo-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-zlib-7.2.5-1.10.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"php72-zlib-debuginfo-7.2.5-1.10.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php72");
}
VendorProductVersionCPE
novellsuse_linuxapache2-mod_php72p-cpe:/a:novell:suse_linux:apache2-mod_php72
novellsuse_linuxapache2-mod_php72-debuginfop-cpe:/a:novell:suse_linux:apache2-mod_php72-debuginfo
novellsuse_linuxphp72p-cpe:/a:novell:suse_linux:php72
novellsuse_linuxphp72-bcmathp-cpe:/a:novell:suse_linux:php72-bcmath
novellsuse_linuxphp72-bcmath-debuginfop-cpe:/a:novell:suse_linux:php72-bcmath-debuginfo
novellsuse_linuxphp72-bz2p-cpe:/a:novell:suse_linux:php72-bz2
novellsuse_linuxphp72-bz2-debuginfop-cpe:/a:novell:suse_linux:php72-bz2-debuginfo
novellsuse_linuxphp72-calendarp-cpe:/a:novell:suse_linux:php72-calendar
novellsuse_linuxphp72-calendar-debuginfop-cpe:/a:novell:suse_linux:php72-calendar-debuginfo
novellsuse_linuxphp72-ctypep-cpe:/a:novell:suse_linux:php72-ctype
Rows per page:
1-10 of 1061

Related

openvas 27
osv 8
nessus 32
ubuntu 3
suse 4
debian 1
f5 2
ibm 4
amazon 1
ubuntucve 5
prion 5
alpinelinux 4
redhatcve 5
debiancve 5
cve 5
veracode 4
hackerone 3
almalinux 1
oraclelinux 1
rocky 1
redhat 3
rosalinux 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:0988-1)
2021-06-09 00:00:00
Debian: Security Advisory (DSA-4403-1)
2019-03-07 00:00:00
PHP Multiple Vulnerabilities (Mar 2019) - Linux
2019-03-12 00:00:00
osv
osv
php7.0 - security update
2019-03-08 00:00:00
php5 - security update
2019-03-31 00:00:00
CVE-2019-9639
2019-03-09 00:29:00
nessus
nessus
Debian DSA-4403-1 : php7.0 - security update
2019-03-11 00:00:00
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-3922-2)
2019-04-24 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3922-1)
2023-10-21 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2019-04-23 00:00:00
PHP vulnerabilities
2019-04-25 00:00:00
PHP vulnerabilities
2019-03-26 00:00:00
suse
suse
Security update for php5 (moderate)
2019-06-03 00:00:00
Security update for php7 (moderate)
2019-04-29 00:00:00
Security update for php7 (moderate)
2019-06-18 00:00:00
debian
debian
[SECURITY] [DLA 1741-1] php5 security update
2019-03-31 14:37:39
f5
f5
K25544541 : PHP vulnerabilities CVE-2019-9638, CVE-2019-9639, CVE-2019-9640, and CVE-2019-9641
2019-03-14 00:00:00
K53825211 : PHP vulnerability CVE-2019-9637
2019-03-26 00:00:00
ibm
ibm
Security Bulletin: IBM API Connect Developer Portal is affected by multiple PHP vulnerabilities (CVE-2019-9641 CVE-2019-9637 CVE-2019-9639 CVE-2019-9638)
2019-04-03 23:05:01
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP
2023-12-07 22:45:07
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabiltiies in PHP.
2020-01-27 16:55:56
amazon
amazon
Medium: php71, php72, php73
2019-09-13 22:49:00
ubuntucve
ubuntucve
CVE-2019-9639
2019-03-08 00:00:00
CVE-2019-9640
2019-03-08 00:00:00
CVE-2019-9638
2019-03-08 00:00:00
prion
prion
Design/Logic Flaw
2019-03-09 00:29:00
Design/Logic Flaw
2019-03-09 00:29:00
Buffer overflow
2019-03-11 11:29:00
alpinelinux
alpinelinux
CVE-2019-9639
2019-03-09 00:29:00
CVE-2019-9640
2019-03-09 00:29:00
CVE-2019-9638
2019-03-09 00:29:00
redhatcve
redhatcve
CVE-2019-9639
2020-03-30 08:22:41
CVE-2019-9638
2020-03-29 07:57:07
CVE-2019-9675
2020-01-03 15:43:50
debiancve
debiancve
CVE-2019-9639
2019-03-09 00:29:00
CVE-2019-9638
2019-03-09 00:29:00
CVE-2019-9640
2019-03-09 00:29:00
cve
cve
CVE-2019-9640
2019-03-09 00:29:00
CVE-2019-9638
2019-03-09 00:29:00
CVE-2019-9637
2019-03-09 00:29:00
veracode
veracode
Information Disclosure
2019-08-20 00:10:43
Information Disclosure
2019-08-20 00:10:43
Information Disclosure
2019-08-20 00:10:43
hackerone
hackerone
Internet Bug Bounty: Uninitialized read in exif_process_IFD_in_MAKERNOTE
2019-03-27 03:18:50
Internet Bug Bounty: Invalid Read on exif_process_SOFn
2019-03-15 08:45:38
Internet Bug Bounty: phar_tar_writeheaders_int() buffer overflow
2019-03-04 12:21:44
almalinux
almalinux
Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
oraclelinux
oraclelinux
php:7.2 security, bug fix, and enhancement update
2020-05-05 00:00:00
rocky
rocky
php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
redhat
redhat
(RHSA-2020:1624) Moderate: php:7.2 security, bug fix, and enhancement update
2020-04-28 08:57:54
(RHSA-2019:3299) Critical: rh-php72-php security update
2019-11-01 12:22:19
(RHSA-2019:2519) Moderate: rh-php71-php security, bug fix, and enhancement update
2019-08-19 08:09:18
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
JSON
Related for SUSE_SU-2019-0988-1.NASL
openvas27osv8nessus32ubuntu3suse4debian1f52ibm4amazon1ubuntucve5prion5alpinelinux4redhatcve5debiancve5cve5veracode4hackerone3almalinux1oraclelinux1rocky1redhat3rosalinux1