The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

  - main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting     fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to     127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this     example) is hardcoded into an application as a security policy, but the hostname argument (i.e.,     127.0.0.1:80 in this example) is obtained from untrusted input. (CVE-2017-7189)

  - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts     filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security     vulnerabilities, e.g. in applications checking paths that the code is allowed to access. (CVE-2019-11045)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 7 : php (Unpatched Vulnerability)

critical Nessus Plugin ID 202267

Version 1.5

Version 1.3

Version 1.2

Version 1.5 Oct 24, 2024, 2:46 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202410241446
Version 1.3 Oct 9, 2024, 6:56 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410090656
Version 1.2 Oct 8, 2024, 5:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410080516