Test ID:	1.3.6.1.4.1.25623.1.0.841728
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2126-1)
Summary:	The remote host is missing an update for the 'php5' package(s) announced via the USN-2126-1 advisory.
Description:	Summary: The remote host is missing an update for the 'php5' package(s) announced via the USN-2126-1 advisory. Vulnerability Insight: Bernd Melchers discovered that PHP's embedded libmagic library incorrectly handled indirect offset values. An attacker could use this issue to cause PHP to consume resources or crash, resulting in a denial of service. (CVE-2014-1943) It was discovered that PHP incorrectly handled certain values when using the imagecrop function. An attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, obtain sensitive information, or possibly execute arbitrary code. This issue only affected Ubuntu 13.10. (CVE-2013-7226, CVE-2013-7327, CVE-2013-7328, CVE-2014-2020) Affected Software/OS: 'php5' package(s) on Ubuntu 10.04, Ubuntu 12.04, Ubuntu 12.10, Ubuntu 13.10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7226 BugTraq ID: 65533 http://www.securityfocus.com/bid/65533 http://www.mandriva.com/security/advisories?name=MDVSA-2014:027 http://www.securitytracker.com/id/1029767 http://secunia.com/advisories/56829 http://www.ubuntu.com/usn/USN-2126-1 XForce ISS Database: php-cve20137226-bo(91099) https://exchange.xforce.ibmcloud.com/vulnerabilities/91099 Common Vulnerability Exposure (CVE) ID: CVE-2013-7327 Common Vulnerability Exposure (CVE) ID: CVE-2013-7328 Common Vulnerability Exposure (CVE) ID: CVE-2014-1943 Debian Security Information: DSA-2861 (Google Search) http://www.debian.org/security/2014/dsa-2861 Debian Security Information: DSA-2868 (Google Search) http://www.debian.org/security/2014/dsa-2868 http://mx.gw.com/pipermail/file/2014/001330.html http://mx.gw.com/pipermail/file/2014/001334.html http://mx.gw.com/pipermail/file/2014/001337.html http://mx.gw.com/pipermail/file/2014/001327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html SuSE Security Announcement: openSUSE-SU-2014:0364 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html SuSE Security Announcement: openSUSE-SU-2014:0367 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html http://www.ubuntu.com/usn/USN-2123-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-2020
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.