Debian Security Advisory DSA 2492-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 2492-1. OpenVAS Vulnerability Test $Id: deb24921.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2492-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2492-1 : php5 - buffer overflow

The Phar extension for PHP does not properly handle crafted tar files, leading to a heap-based buffer overflow. PHP applications processing tar files could crash or, potentially, execute arbitrary code. In addition, this update addresses a regression which caused a crash when accessing a global...