USN-2952-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-2952-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2952-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-2952-1

Related

Published

2016-04-21T15:16:48.811158Z

Modified

2016-04-21T15:16:48.811158Z

Summary

php5 vulnerabilities

Details

It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A remote attacker could possibly use this issue to create arbitrary directories. (CVE-2014-9767)

It was discovered that the PHP Soap client incorrectly validated data types. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-8835, CVE-2016-3185)

It was discovered that the PHP MySQL native driver incorrectly handled TLS connections to MySQL databases. A machine-in-the-middle attacker could possibly use this issue to downgrade and snoop on TLS connections. This vulnerability is known as BACKRONYM. (CVE-2015-8838)

It was discovered that PHP incorrectly handled the imagerotate function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-1903)

Hans Jerry Illikainen discovered that the PHP phar extension incorrectly handled certain tar archives. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-2554)

It was discovered that the PHP WDDX extension incorrectly handled certain malformed XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-3141)

It was discovered that the PHP phar extension incorrectly handled certain zip files. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2016-3142)

It was discovered that the PHP libxmldisableentity_loader() setting was shared between threads. When running under PHP-FPM, this could result in XML external entity injection and entity expansion issues. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (No CVE number)

It was discovered that the PHP opensslrandompseudo_bytes() function did not return cryptographically strong pseudo-random bytes. (No CVE number)

It was discovered that the PHP Fileinfo component incorrectly handled certain magic files. An attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE number pending)

It was discovered that the PHP phpsnmperror() function incorrectly handled string formatting. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE number pending)

It was discovered that the PHP rawurlencode() function incorrectly handled large strings. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. (CVE number pending)

It was discovered that the PHP phar extension incorrectly handled certain filenames in archives. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE number pending)

It was discovered that the PHP mb_strcut() function incorrectly handled string formatting. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE number pending)

References

Affected packages

Ubuntu:14.04:LTS / php5

Package

Name: php5
Purl: pkg:deb/ubuntu/php5?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.9+dfsg-1ubuntu4.16

Affected versions

5.*

5.5.3+dfsg-1ubuntu2

5.5.3+dfsg-1ubuntu3

5.5.6+dfsg-1ubuntu1

5.5.6+dfsg-1ubuntu2

5.5.8+dfsg-2ubuntu1

5.5.9+dfsg-1ubuntu1

5.5.9+dfsg-1ubuntu2

5.5.9+dfsg-1ubuntu3

5.5.9+dfsg-1ubuntu4

5.5.9+dfsg-1ubuntu4.1

5.5.9+dfsg-1ubuntu4.2

5.5.9+dfsg-1ubuntu4.3

5.5.9+dfsg-1ubuntu4.4

5.5.9+dfsg-1ubuntu4.5

5.5.9+dfsg-1ubuntu4.6

5.5.9+dfsg-1ubuntu4.7

5.5.9+dfsg-1ubuntu4.9

5.5.9+dfsg-1ubuntu4.11

5.5.9+dfsg-1ubuntu4.12

5.5.9+dfsg-1ubuntu4.13

5.5.9+dfsg-1ubuntu4.14

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libapache2-mod-php5"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libapache2-mod-php5-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libapache2-mod-php5filter"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libapache2-mod-php5filter-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libphp5-embed"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "libphp5-embed-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php-pear"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-cgi"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-cgi-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-cli"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-cli-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-common"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-common-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-curl"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-curl-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-dbg"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-dev"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-dev-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-enchant"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-enchant-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-fpm"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-fpm-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-gd"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-gd-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-gmp"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-gmp-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-intl"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-intl-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-ldap"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-ldap-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-mysql"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-mysql-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-mysqlnd"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-mysqlnd-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-odbc"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-odbc-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-pgsql"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-pgsql-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-pspell"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-pspell-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-readline"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-readline-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-recode"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-recode-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-snmp"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-snmp-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-sqlite"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-sqlite-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-sybase"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-sybase-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-tidy"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-tidy-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-xmlrpc"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-xmlrpc-dbgsym"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-xsl"
        },
        {
            "binary_version": "5.5.9+dfsg-1ubuntu4.16",
            "binary_name": "php5-xsl-dbgsym"
        }
    ]
}