PHP: Vulnerabilities in included PCRE and XML-RPC libraries — GLSA 200509-19

PHP makes use of an affected PCRE library and ships with an affected XML-RPC library and is therefore potentially vulnerable to remote execution of arbitrary code.

Affected packages

Background

PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the mod_php module or the CGI version of PHP, or can run stand-alone in a CLI.

Description

PHP makes use of a private copy of libpcre which is subject to an integer overflow leading to a heap overflow (see GLSA 200508-17). It also ships with an XML-RPC library affected by a script injection vulnerability (see GLSA 200508-13).

Impact

An attacker could target a PHP-based web application that would use untrusted data as regular expressions, potentially resulting in the execution of arbitrary code. If web applications make use of the XML-RPC library shipped with PHP, they are also vulnerable to remote execution of arbitrary PHP code.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose dev-php/php

 # emerge --sync
 # emerge --ask --oneshot --verbose dev-php/mod_php

 # emerge --sync
 # emerge --ask --oneshot --verbose dev-php/php-cgi

References

• CAN-2005-2491
• CAN-2005-2498
• GLSA 200508-13
• GLSA 200508-17

Release date
September 27, 2005

Latest revision
September 27, 2005: 01

Severity
normal

Exploitable
remote

Bugzilla entries

• 102373