Debian 9 host squashfs-tools LTS security update for vulnerability CVE-2021-4107
Reporter | Title | Published | Views | Family All 154 |
---|---|---|---|---|
![]() | EulerOS Virtualization 3.0.6.6 : squashfs-tools (EulerOS-SA-2022-1147) | 12 Feb 202200:00 | – | nessus |
![]() | GLSA-202305-29 : squashfs-tools: Multiple Vulnerabilities | 30 May 202300:00 | – | nessus |
![]() | Oracle Linux 8 : squashfs-tools (ELSA-2024-3139) | 28 May 202400:00 | – | nessus |
![]() | Ubuntu 16.04 ESM : Squashfs-Tools vulnerabilities (USN-5078-2) | 15 Sep 202100:00 | – | nessus |
![]() | CentOS 8 : squashfs-tools (CESA-2024:3139) | 22 May 202400:00 | – | nessus |
![]() | EulerOS 2.0 SP8 : squashfs-tools (EulerOS-SA-2021-2814) | 25 Dec 202100:00 | – | nessus |
![]() | Photon OS 4.0: Squashfs PHSA-2022-4.0-0166 | 23 Jul 202400:00 | – | nessus |
![]() | RHEL 9 : squashfs-tools (RHSA-2024:2396) | 30 Apr 202400:00 | – | nessus |
![]() | EulerOS 2.0 SP10 : squashfs-tools (EulerOS-SA-2022-1235) | 25 Feb 202200:00 | – | nessus |
![]() | Debian DSA-4987-1 : squashfs-tools - security update | 16 Oct 202100:00 | – | nessus |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Debian Security Advisory dla-2789. The text
# itself is copyright (C) Software in the Public Interest, Inc.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(154331);
script_version("1.3");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/11/28");
script_cve_id("CVE-2021-41072");
script_name(english:"Debian DLA-2789-1 : squashfs-tools - LTS security update");
script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing a security-related update.");
script_set_attribute(attribute:"description", value:
"The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2789
advisory.
- squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different
vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link
and then contents under the same filename in a filesystem can cause unsquashfs to first create the
symbolic link pointing outside the expected directory, and then the subsequent write operation will cause
the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
# https://security-tracker.debian.org/tracker/source-package/squashfs-tools
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d374def4");
script_set_attribute(attribute:"see_also", value:"https://www.debian.org/lts/security/2021/dla-2789");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2021-41072");
script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/stretch/squashfs-tools");
script_set_attribute(attribute:"solution", value:
"Upgrade the squashfs-tools packages.
For Debian 9 stretch, this problem has been fixed in version 1");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-41072");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2021/09/14");
script_set_attribute(attribute:"patch_publication_date", value:"2021/10/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2021/10/21");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:squashfs-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:squashfs-tools-dbg");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Debian Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2021-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
exit(0);
}
include('audit.inc');
include('debian_package.inc');
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
var release = get_kb_item('Host/Debian/release');
if ( isnull(release) ) audit(AUDIT_OS_NOT, 'Debian');
var release = chomp(release);
if (! preg(pattern:"^(9)\.[0-9]+", string:release)) audit(AUDIT_OS_NOT, 'Debian 9.0', 'Debian ' + release);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Debian', cpu);
var pkgs = [
{'release': '9.0', 'prefix': 'squashfs-tools', 'reference': '1:4.3-3+deb9u3'},
{'release': '9.0', 'prefix': 'squashfs-tools-dbg', 'reference': '1:4.3-3+deb9u3'}
];
var flag = 0;
foreach package_array ( pkgs ) {
var release = NULL;
var prefix = NULL;
var reference = NULL;
if (!empty_or_null(package_array['release'])) release = package_array['release'];
if (!empty_or_null(package_array['prefix'])) prefix = package_array['prefix'];
if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
if (release && prefix && reference) {
if (deb_check(release:release, prefix:prefix, reference:reference)) flag++;
}
}
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : deb_report_get()
);
exit(0);
}
else
{
var tested = deb_pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'squashfs-tools / squashfs-tools-dbg');
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo