Test ID:	1.3.6.1.4.1.25623.1.1.4.2014.0873.2
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2014:0873-2)
Summary:	The remote host is missing an update for the 'PHP5' package(s) announced via the SUSE-SU-2014:0873-2 advisory.
Description:	Summary: The remote host is missing an update for the 'PHP5' package(s) announced via the SUSE-SU-2014:0873-2 advisory. Vulnerability Insight: PHP5 has been updated to fix four security vulnerabilities: * Heap-based buffer overflow in DNS TXT record parsing (CVE-2014-4049) * Heap based buffer overflow in time handling in openssl_x509_parse (CVE-2013-6420) * Man in the Middle attack in the openssl_x509_parse due to lack of 0 handling (CVE-2013-4248) * NULL pointer dereference in GD XPM decoder (CVE-2014-2497) Security Issues: * CVE-2014-4049 * CVE-2013-6420 * CVE-2013-4248 * CVE-2014-2497 Affected Software/OS: 'PHP5' package(s) on SUSE Linux Enterprise Server 11-SP1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4248 BugTraq ID: 61776 http://www.securityfocus.com/bid/61776 Debian Security Information: DSA-2742 (Google Search) http://www.debian.org/security/2013/dsa-2742 HPdes Security Advisory: HPSBUX03150 http://marc.info/?l=bugtraq&m=141390017113542&w=2 RedHat Security Advisories: RHSA-2013:1307 http://rhn.redhat.com/errata/RHSA-2013-1307.html RedHat Security Advisories: RHSA-2013:1615 http://rhn.redhat.com/errata/RHSA-2013-1615.html http://www.securitytracker.com/id/1028924 http://secunia.com/advisories/54478 http://secunia.com/advisories/54657 http://secunia.com/advisories/55078 http://secunia.com/advisories/59652 SuSE Security Announcement: openSUSE-SU-2013:1963 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html SuSE Security Announcement: openSUSE-SU-2013:1964 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html http://www.ubuntu.com/usn/USN-1937-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-6420 BugTraq ID: 64225 http://www.securityfocus.com/bid/64225 Debian Security Information: DSA-2816 (Google Search) http://www.debian.org/security/2013/dsa-2816 HPdes Security Advisory: HPSBMU03112 https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322 HPdes Security Advisory: SSRT101447 https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html RedHat Security Advisories: RHSA-2013:1813 http://rhn.redhat.com/errata/RHSA-2013-1813.html RedHat Security Advisories: RHSA-2013:1815 http://rhn.redhat.com/errata/RHSA-2013-1815.html RedHat Security Advisories: RHSA-2013:1824 http://rhn.redhat.com/errata/RHSA-2013-1824.html RedHat Security Advisories: RHSA-2013:1825 http://rhn.redhat.com/errata/RHSA-2013-1825.html RedHat Security Advisories: RHSA-2013:1826 http://rhn.redhat.com/errata/RHSA-2013-1826.html http://www.securitytracker.com/id/1029472 http://www.ubuntu.com/usn/USN-2055-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-2497 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html BugTraq ID: 66233 http://www.securityfocus.com/bid/66233 Debian Security Information: DSA-3215 (Google Search) http://www.debian.org/security/2015/dsa-3215 https://security.gentoo.org/glsa/201607-04 http://www.mandriva.com/security/advisories?name=MDVSA-2015:153 RedHat Security Advisories: RHSA-2014:1326 http://rhn.redhat.com/errata/RHSA-2014-1326.html RedHat Security Advisories: RHSA-2014:1327 http://rhn.redhat.com/errata/RHSA-2014-1327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html http://secunia.com/advisories/59061 http://secunia.com/advisories/59418 http://secunia.com/advisories/59496 SuSE Security Announcement: SUSE-SU-2014:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html SuSE Security Announcement: SUSE-SU-2014:0869 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html http://www.ubuntu.com/usn/USN-2987-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-4049 BugTraq ID: 68007 http://www.securityfocus.com/bid/68007 Debian Security Information: DSA-2961 (Google Search) http://www.debian.org/security/2014/dsa-2961 HPdes Security Advisory: HPSBUX03102 http://marc.info/?l=bugtraq&m=141017844705317&w=2 HPdes Security Advisory: SSRT101681 http://www.openwall.com/lists/oss-security/2014/06/13/4 http://www.securitytracker.com/id/1030435 http://secunia.com/advisories/59270 http://secunia.com/advisories/59329 http://secunia.com/advisories/59513 http://secunia.com/advisories/60998 SuSE Security Announcement: openSUSE-SU-2014:0841 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html SuSE Security Announcement: openSUSE-SU-2014:0942 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.