php5 was updated to fix four security issues.

These security issues were fixed :

  - CVE-2015-0231: Use-after-free vulnerability in the     process_nested_data function in     ext/standard/var_unserializer.re in PHP before 5.4.37,     5.5.x before 5.5.21, and 5.6.x before 5.6.5 allowed     remote attackers to execute arbitrary code via a crafted     unserialize call that leverages improper handling of     duplicate numerical keys within the serialized     properties of an object. NOTE: this vulnerability exists     because of an incomplete fix for CVE-2014-8142     (bnc#910659).

  - CVE-2014-9427: sapi/cgi/cgi_main.c in the CGI component     in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x     through 5.6.4, when mmap is used to read a .php file,     did not properly consider the mapping's length during     processing of an invalid file that begins with a #     character and lacks a newline character, which caused an     out-of-bounds read and might (1) allow remote attackers     to obtain sensitive information from php-cgi process     memory by leveraging the ability to upload a .php file     or (2) trigger unexpected code execution if a valid PHP     script is present in memory locations adjacent to the     mapping (bnc#911664).

  - CVE-2015-0232: The exif_process_unicode function in     ext/exif/exif.c in PHP before 5.4.37, 5.5.x before     5.5.21, and 5.6.x before 5.6.5 allowed remote attackers     to execute arbitrary code or cause a denial of service     (uninitialized pointer free and application crash) via     crafted EXIF data in a JPEG image (bnc#914690).

  - CVE-2014-8142: Use-after-free vulnerability in the     process_nested_data function in     ext/standard/var_unserializer.re in PHP before 5.4.36,     5.5.x before 5.5.20, and 5.6.x before 5.6.4 allowed     remote attackers to execute arbitrary code via a crafted     unserialize call that leverages improper handling of     duplicate keys within the serialized properties of an     object, a different vulnerability than CVE-2004-1019     (bnc#910659).

Additionally a fix was included that protects against a possible NULL pointer use (bnc#910659).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES12 Security Update : php5 (SUSE-SU-2015:0365-1)

critical Nessus Plugin ID 119961

Version 1.7