CVE-2016-5769
php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Amazon (media), Ubuntu (media).
Descripción
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php55, php55-bcmath, php55-cli y 60 más | 5.5.38-1.116.amzn1 y 1 más |
| debian 7 | php5 | 5.4.45-0+deb7u5 |
| debian 8 | php5 | 5.6.23+dfsg-0+deb8u1 |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.24 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.19 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.19 |
| ubuntu 16.04 | php7.0 | 7.0.8-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | php7.0 | 7.0.8-0ubuntu0.16.04.1 |
Mostrar las 70 entradas de 8 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | php55 | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-bcmath | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-cli | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-common | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-dba | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-debuginfo | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-devel | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-embedded | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-enchant | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-fpm | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-gd | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-gmp | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-imap | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-intl | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-ldap | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-mbstring | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-mcrypt | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-mssql | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-mysqlnd | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-odbc | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-opcache | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-pdo | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-pgsql | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-process | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-pspell | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-recode | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-snmp | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-soap | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-tidy | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-xml | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php55-xmlrpc | 5.5.38-1.116.amzn1 |
| amazon linux 1 | php56 | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-bcmath | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-cli | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-common | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-dba | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-dbg | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-debuginfo | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-devel | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-embedded | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-enchant | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-fpm | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-gd | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-gmp | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-imap | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-intl | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-ldap | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-mbstring | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-mcrypt | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-mssql | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-mysqlnd | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-odbc | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-opcache | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-pdo | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-pgsql | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-process | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-pspell | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-recode | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-snmp | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-soap | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-tidy | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-xml | 5.6.24-1.126.amzn1 |
| amazon linux 1 | php56-xmlrpc | 5.6.24-1.126.amzn1 |
| debian 7 | php5 | 5.4.45-0+deb7u5 |
| debian 8 | php5 | 5.6.23+dfsg-0+deb8u1 |
| ubuntu 12.04 | php5 | 5.3.10-1ubuntu3.24 |
| ubuntu 14.04 | php5 | 5.5.9+dfsg-1ubuntu4.19 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.19 |
| ubuntu 16.04 | php7.0 | 7.0.8-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | php7.0 | 7.0.8-0ubuntu0.16.04.1 |
Referencias
- http://github.com/php/php-src/commit/6c5211a0cef0cc2854eaa387e0eb036e012904d0?w=1
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
- http://php.net/ChangeLog-5.php
- http://php.net/ChangeLog-7.php
- http://www.debian.org/security/2016/dsa-3618
Las 18 referencias
- http://www.openwall.com/lists/oss-security/2016/06/23/4
- http://www.securityfocus.com/bid/91399
- https://access.redhat.com/security/cve/CVE-2016-5769
- https://bugs.php.net/bug.php?id=72455
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
- https://marc.info/?l=oss-security&m=146668499803695&w=2
- https://nvd.nist.gov/vuln/detail/CVE-2016-5769
- https://support.apple.com/HT207170
- https://ubuntu.com/security/notices/USN-3045-1
- https://www.cve.org/CVERecord?id=CVE-2016-5769