Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 12.04 ESM USN-3902-2 Critical: PHP Denial Of Service Issues

ubuntu
Calendar Grey March 12, 2019
Dist Ubuntu Esm H88
Recent guidance on PHP security flaws impacting Ubuntu 12.04 ESM has surfaced, underlining significant concerns and necessary patches.
Several security issues were fixed in PHP.

Summary

Several security issues were fixed in PHP.

Software Description:

- php5: HTML-embedded scripting language interpreter

Details:

USN-3902-1 fixed a vulnerability in PHP. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that the PHP XML-RPC module incorrectly handled

 decoding XML data. A remote attacker could possibly use this issue to

 cause PHP to crash, resulting in a denial of service. (CVE-2019-9020,

 CVE-2019-9024)

 It was discovered that the PHP PHAR module incorrectly handled certain

 filenames. A remote attacker could possibly use this issue to cause

 PHP to crash, resulting in a denial of service. (CVE-2019-9021)

 It was discovered that PHP incorrectly handled mbstring regular

 expressions. A remote attacker could possibly use this issue to cause

 PHP to crash, resulting in a denial of service. (CVE-2019-9023)

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu PHP

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libapache2-mod-php5             5.3.10-1ubuntu3.33
  php5-cgi                        5.3.10-1ubuntu3.33
  php5-cli                        5.3.10-1ubuntu3.33
  php5-fpm                        5.3.10-1ubuntu3.33
  php5-xmlrpc                     5.3.10-1ubuntu3.33

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3902-2

  https://ubuntu.com/security/notices/USN-3902-1

  CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024

Severity
critical
Lowest
Low
Medium
High
Critical

March 12, 2019

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu PHP

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here