SUSE update for php7

1) Use-after-free

EUVDB-ID: #VU60707

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C]

CVE-ID: CVE-2021-21708

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the "php_filter_float()" function. A remote attacker can pass specially crafted input to the application that uses the affected PHP function, trigger a use-after-free error and crash the php-fpm process.

Mitigation

Update the affected package php7 to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server: 15-SP2-BCL - 15-SP3-LTSS

SUSE Linux Enterprise High Performance Computing: 15-SP2-ESPOS - 15-SP3-LTSS

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise Module for Web Scripting: 15-SP3

SUSE Manager Server: 4.1 - 4.2

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1 - 4.2

SUSE Linux Enterprise Server for SAP: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3

php7-embed-debuginfo: before 7.4.6-3.35.1

php7-embed: before 7.4.6-3.35.1

php7-zlib-debuginfo: before 7.4.6-3.35.1

php7-zlib: before 7.4.6-3.35.1

php7-zip-debuginfo: before 7.4.6-3.35.1

php7-zip: before 7.4.6-3.35.1

php7-xsl-debuginfo: before 7.4.6-3.35.1

php7-xsl: before 7.4.6-3.35.1

php7-xmlwriter-debuginfo: before 7.4.6-3.35.1

php7-xmlwriter: before 7.4.6-3.35.1

php7-xmlrpc-debuginfo: before 7.4.6-3.35.1

php7-xmlrpc: before 7.4.6-3.35.1

php7-xmlreader-debuginfo: before 7.4.6-3.35.1

php7-xmlreader: before 7.4.6-3.35.1

php7-tokenizer-debuginfo: before 7.4.6-3.35.1

php7-tokenizer: before 7.4.6-3.35.1

php7-tidy-debuginfo: before 7.4.6-3.35.1

php7-tidy: before 7.4.6-3.35.1

php7-sysvshm-debuginfo: before 7.4.6-3.35.1

php7-sysvshm: before 7.4.6-3.35.1

php7-sysvsem-debuginfo: before 7.4.6-3.35.1

php7-sysvsem: before 7.4.6-3.35.1

php7-sysvmsg-debuginfo: before 7.4.6-3.35.1

php7-sysvmsg: before 7.4.6-3.35.1

php7-sqlite-debuginfo: before 7.4.6-3.35.1

php7-sqlite: before 7.4.6-3.35.1

php7-sodium-debuginfo: before 7.4.6-3.35.1

php7-sodium: before 7.4.6-3.35.1

php7-sockets-debuginfo: before 7.4.6-3.35.1

php7-sockets: before 7.4.6-3.35.1

php7-soap-debuginfo: before 7.4.6-3.35.1

php7-soap: before 7.4.6-3.35.1

php7-snmp-debuginfo: before 7.4.6-3.35.1

php7-snmp: before 7.4.6-3.35.1

php7-shmop-debuginfo: before 7.4.6-3.35.1

php7-shmop: before 7.4.6-3.35.1

php7-readline-debuginfo: before 7.4.6-3.35.1

php7-readline: before 7.4.6-3.35.1

php7-posix-debuginfo: before 7.4.6-3.35.1

php7-posix: before 7.4.6-3.35.1

php7-phar-debuginfo: before 7.4.6-3.35.1

php7-phar: before 7.4.6-3.35.1

php7-pgsql-debuginfo: before 7.4.6-3.35.1

php7-pgsql: before 7.4.6-3.35.1

php7-pdo-debuginfo: before 7.4.6-3.35.1

php7-pdo: before 7.4.6-3.35.1

php7-pcntl-debuginfo: before 7.4.6-3.35.1

php7-pcntl: before 7.4.6-3.35.1

php7-openssl-debuginfo: before 7.4.6-3.35.1

php7-openssl: before 7.4.6-3.35.1

php7-opcache-debuginfo: before 7.4.6-3.35.1

php7-opcache: before 7.4.6-3.35.1

php7-odbc-debuginfo: before 7.4.6-3.35.1

php7-odbc: before 7.4.6-3.35.1

php7-mysql-debuginfo: before 7.4.6-3.35.1

php7-mysql: before 7.4.6-3.35.1

php7-mbstring-debuginfo: before 7.4.6-3.35.1

php7-mbstring: before 7.4.6-3.35.1

php7-ldap-debuginfo: before 7.4.6-3.35.1

php7-ldap: before 7.4.6-3.35.1

php7-json-debuginfo: before 7.4.6-3.35.1

php7-json: before 7.4.6-3.35.1

php7-intl-debuginfo: before 7.4.6-3.35.1

php7-intl: before 7.4.6-3.35.1

php7-iconv-debuginfo: before 7.4.6-3.35.1

php7-iconv: before 7.4.6-3.35.1

php7-gmp-debuginfo: before 7.4.6-3.35.1

php7-gmp: before 7.4.6-3.35.1

php7-gettext-debuginfo: before 7.4.6-3.35.1

php7-gettext: before 7.4.6-3.35.1

php7-gd-debuginfo: before 7.4.6-3.35.1

php7-gd: before 7.4.6-3.35.1

php7-ftp-debuginfo: before 7.4.6-3.35.1

php7-ftp: before 7.4.6-3.35.1

php7-fpm-debuginfo: before 7.4.6-3.35.1

php7-fpm: before 7.4.6-3.35.1

php7-fileinfo-debuginfo: before 7.4.6-3.35.1

php7-fileinfo: before 7.4.6-3.35.1

php7-fastcgi-debuginfo: before 7.4.6-3.35.1

php7-fastcgi: before 7.4.6-3.35.1

php7-exif-debuginfo: before 7.4.6-3.35.1

php7-exif: before 7.4.6-3.35.1

php7-enchant-debuginfo: before 7.4.6-3.35.1

php7-enchant: before 7.4.6-3.35.1

php7-dom-debuginfo: before 7.4.6-3.35.1

php7-dom: before 7.4.6-3.35.1

php7-devel: before 7.4.6-3.35.1

php7-debugsource: before 7.4.6-3.35.1

php7-debuginfo: before 7.4.6-3.35.1

php7-dba-debuginfo: before 7.4.6-3.35.1

php7-dba: before 7.4.6-3.35.1

php7-curl-debuginfo: before 7.4.6-3.35.1

php7-curl: before 7.4.6-3.35.1

php7-ctype-debuginfo: before 7.4.6-3.35.1

php7-ctype: before 7.4.6-3.35.1

php7-calendar-debuginfo: before 7.4.6-3.35.1

php7-calendar: before 7.4.6-3.35.1

php7-bz2-debuginfo: before 7.4.6-3.35.1

php7-bz2: before 7.4.6-3.35.1

php7-bcmath-debuginfo: before 7.4.6-3.35.1

php7-bcmath: before 7.4.6-3.35.1

php7: before 7.4.6-3.35.1

apache2-mod_php7-debuginfo: before 7.4.6-3.35.1

apache2-mod_php7: before 7.4.6-3.35.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20220847-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.