Test ID:	1.3.6.1.4.1.25623.1.1.4.2017.0017.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2017:0017-1)
Summary:	The remote host is missing an update for the 'php7' package(s) announced via the SUSE-SU-2017:0017-1 advisory.
Description:	Summary: The remote host is missing an update for the 'php7' package(s) announced via the SUSE-SU-2017:0017-1 advisory. Vulnerability Insight: This update for php7 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] * CVE-2016-9936 Use After free in the function serialize() could lead to crash [bsc#1015191] Affected Software/OS: 'php7' package(s) on SUSE Linux Enterprise Module for Web Scripting 12, SUSE Linux Enterprise Software Development Kit 12-SP1, SUSE Linux Enterprise Software Development Kit 12-SP2. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9933 BugTraq ID: 94865 http://www.securityfocus.com/bid/94865 Debian Security Information: DSA-3751 (Google Search) http://www.debian.org/security/2017/dsa-3751 http://www.openwall.com/lists/oss-security/2016/12/12/2 RedHat Security Advisories: RHSA-2018:1296 https://access.redhat.com/errata/RHSA-2018:1296 SuSE Security Announcement: openSUSE-SU-2016:3228 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html SuSE Security Announcement: openSUSE-SU-2016:3239 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html SuSE Security Announcement: openSUSE-SU-2017:0006 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html SuSE Security Announcement: openSUSE-SU-2017:0061 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html SuSE Security Announcement: openSUSE-SU-2017:0081 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html Common Vulnerability Exposure (CVE) ID: CVE-2016-9934 BugTraq ID: 94845 http://www.securityfocus.com/bid/94845 Common Vulnerability Exposure (CVE) ID: CVE-2016-9935 BugTraq ID: 94846 http://www.securityfocus.com/bid/94846 Debian Security Information: DSA-3737 (Google Search) http://www.debian.org/security/2016/dsa-3737 https://security.gentoo.org/glsa/201702-29 Common Vulnerability Exposure (CVE) ID: CVE-2016-9936 BugTraq ID: 94849 http://www.securityfocus.com/bid/94849
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.