Test ID:	1.3.6.1.4.1.25623.1.0.703198
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3198-1)
Summary:	The remote host is missing an update for the Debian 'php5' package(s) announced via the DSA-3198-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'php5' package(s) announced via the DSA-3198-1 advisory. Vulnerability Insight: Multiple vulnerabilities have been discovered in the PHP language: CVE-2015-2301 Use-after-free in the phar extension. CVE-2015-2331 Emmanuel Law discovered an integer overflow in the processing of ZIP archives, resulting in denial of service or potentially the execution of arbitrary code. For the stable distribution (wheezy), these problems have been fixed in version 5.4.39-0+deb7u1. This update also fixes a regression in the curl support introduced in DSA 3195. For the unstable distribution (sid), these problems will be fixed soon. We recommend that you upgrade your php5 packages. Affected Software/OS: 'php5' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2301 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 73037 http://www.securityfocus.com/bid/73037 Debian Security Information: DSA-3198 (Google Search) http://www.debian.org/security/2015/dsa-3198 https://security.gentoo.org/glsa/201606-10 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 HPdes Security Advisory: HPSBUX03337 http://marc.info/?l=bugtraq&m=143403519711434&w=2 HPdes Security Advisory: SSRT102066 http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 http://openwall.com/lists/oss-security/2015/03/15/6 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html http://www.securitytracker.com/id/1031949 SuSE Security Announcement: SUSE-SU-2015:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0644 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html http://www.ubuntu.com/usn/USN-2535-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2331 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154666.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155299.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153983.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154266.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154276.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155622.html http://www.securitytracker.com/id/1031985 SuSE Security Announcement: openSUSE-SU-2015:0615 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html Common Vulnerability Exposure (CVE) ID: CVE-2015-2348 BugTraq ID: 73434 http://www.securityfocus.com/bid/73434 http://www.securitytracker.com/id/1032484 SuSE Security Announcement: openSUSE-SU-2015:0684 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html http://www.ubuntu.com/usn/USN-2572-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-2787 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 73431 http://www.securityfocus.com/bid/73431 http://www.securitytracker.com/id/1032485 Common Vulnerability Exposure (CVE) ID: CVE-2015-3330 BugTraq ID: 74204 http://www.securityfocus.com/bid/74204 http://openwall.com/lists/oss-security/2015/04/17/7 RedHat Security Advisories: RHSA-2015:1186 http://rhn.redhat.com/errata/RHSA-2015-1186.html RedHat Security Advisories: RHSA-2015:1187 http://rhn.redhat.com/errata/RHSA-2015-1187.html http://www.securitytracker.com/id/1033703 SuSE Security Announcement: openSUSE-SU-2015:0855 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.