Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.844419
Categoría:Ubuntu Local Security Checks
Título:Ubuntu: Security Advisory for php7.4 (USN-4330-2)
Resumen:The remote host is missing an update for the 'php7.4'; package(s) announced via the USN-4330-2 advisory.
Descripción:Summary:
The remote host is missing an update for the 'php7.4'
package(s) announced via the USN-4330-2 advisory.

Vulnerability Insight:
USN-4330-1 fixed vulnerabilities in PHP. This update provides the corresponding
update for Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that PHP incorrectly handled certain EXIF files.
An attacker could possibly use this issue to access sensitive information
or cause a crash. (CVE-2020-7064)

It was discovered that PHP incorrectly handled certain UTF strings.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. (CVE-2020-7065)

It was discovered that PHP incorrectly handled certain URLs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2020-7066)

Affected Software/OS:
'php7.4' package(s) on Ubuntu 20.04 LTS.

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2020-7064
https://security.netapp.com/advisory/ntap-20200403-0001/
Debian Security Information: DSA-4717 (Google Search)
https://www.debian.org/security/2020/dsa-4717
Debian Security Information: DSA-4719 (Google Search)
https://www.debian.org/security/2020/dsa-4719
https://bugs.php.net/bug.php?id=79282
https://www.oracle.com/security-alerts/cpujan2021.html
https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html
SuSE Security Announcement: openSUSE-SU-2020:0642 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html
https://usn.ubuntu.com/4330-1/
https://usn.ubuntu.com/4330-2/
Common Vulnerability Exposure (CVE) ID: CVE-2020-7065
https://bugs.php.net/bug.php?id=79371
Common Vulnerability Exposure (CVE) ID: CVE-2020-7066
https://bugs.php.net/bug.php?id=79329
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.