This update for aspell fixes the following security issue :

CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - aspell: UCS-2 and UCS-4 null-terminated string handling OOB read (CVE-2019-20433)

  - libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in     common/getdata.cpp via an isolated \ character. (CVE-2019-17544)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - aspell: UCS-2 and UCS-4 null-terminated string handling OOB read (CVE-2019-20433)

  - libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in     common/getdata.cpp via an isolated \ character. (CVE-2019-17544)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

This update for php72 fixes the following issues :

Security issues fixed :

CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629).

CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632).

CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14289-1 advisory.

  - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts     filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security     vulnerabilities, e.g. in applications checking paths that the code is allowed to access. (CVE-2019-11045)

  - In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some     systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with     string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can     read to disclosure of the content of some memory locations. (CVE-2019-11046)

  - When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in     PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what     will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
    (CVE-2019-11047, CVE-2019-11050)

  - libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0'     byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the     ASPELL_CONF environment variable. (CVE-2019-20433)

  - When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x     below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read     past the allocated buffer. This may lead to information disclosure or crash. (CVE-2020-7059)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
143781	SUSE SLES12 Security Update : aspell (SUSE-SU-2020:2807-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical
199920	RHEL 8 : aspell (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
199839	RHEL 7 : aspell (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
195772	RHEL 6 : aspell (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	5/11/2024	5/31/2024	critical
133792	SUSE SLES12 Security Update : php72 (SUSE-SU-2020:0397-1)	Nessus	SuSE Local Security Checks	2/19/2020	3/27/2024	critical
150651	SUSE SLES11 Security Update : php53 (SUSE-SU-2020:14289-1)	Nessus	SuSE Local Security Checks	6/10/2021	12/26/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical