Описание
Security update for php53
This update for php53 fixes the following issues:
- security update:
- CVE-2014-3587: Integer overflow in the cdf_read_property_info affecting SLES11 SP3 [bsc#987530]
- CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]
- CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]
- CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]
- CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]
- CVE-2016-5399: Improper error handling in bzread() [bsc#991430]
- CVE-2016-6288: Buffer over-read in php_url_parse_ex [bsc#991433]
- CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]
Список пакетов
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server for SAP Applications 11 SP4
SUSE Linux Enterprise Software Development Kit 11 SP4
Ссылки
- Link for SUSE-SU-2016:2210-1
- E-Mail link for SUSE-SU-2016:2210-1
- SUSE Security Ratings
- SUSE Bug 987530
- SUSE Bug 991426
- SUSE Bug 991427
- SUSE Bug 991428
- SUSE Bug 991429
- SUSE Bug 991430
- SUSE Bug 991433
- SUSE Bug 991437
- SUSE CVE CVE-2014-3587 page
- SUSE CVE CVE-2016-5399 page
- SUSE CVE CVE-2016-6288 page
- SUSE CVE CVE-2016-6289 page
- SUSE CVE CVE-2016-6290 page
- SUSE CVE CVE-2016-6291 page
- SUSE CVE CVE-2016-6296 page
- SUSE CVE CVE-2016-6297 page
Описание
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
Затронутые продукты
Ссылки
- CVE-2014-3587
- SUSE Bug 987530
- SUSE Bug 992991
- SUSE Bug 998845
Описание
The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
Затронутые продукты
Ссылки
- CVE-2016-5399
- SUSE Bug 991430
Описание
The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.
Затронутые продукты
Ссылки
- CVE-2016-6288
- SUSE Bug 991433
Описание
Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.
Затронутые продукты
Ссылки
- CVE-2016-6289
- SUSE Bug 991428
Описание
ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization.
Затронутые продукты
Ссылки
- CVE-2016-6290
- SUSE Bug 991429
Описание
The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.
Затронутые продукты
Ссылки
- CVE-2016-6291
- SUSE Bug 991427
Описание
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
Затронутые продукты
Ссылки
- CVE-2016-6296
- SUSE Bug 991437
Описание
Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.
Затронутые продукты
Ссылки
- CVE-2016-6297
- SUSE Bug 991426