EulerOS Virtualization 2.10.0 : glib2 (EulerOS-SA-2026-1166)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(297331);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/31");

  script_cve_id(
    "CVE-2024-34397",
    "CVE-2025-3360",
    "CVE-2025-4373",
    "CVE-2025-7039"
  );
  script_xref(name:"IAVA", value:"2025-A-0322-S");
  script_xref(name:"IAVA", value:"2025-A-0464-S");

  script_name(english:"EulerOS Virtualization 2.10.0 : glib2 (EulerOS-SA-2026-1166)");

  script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS Virtualization host is missing multiple security updates.");
  script_set_attribute(attribute:"description", value:
"According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is
affected by the following vulnerabilities :

    A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds
    memory access, allowing an attacker to potentially perform path traversal or access private temporary file
    content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths
    and access unauthorized data. The core issue stems from insufficient validation of file path lengths
    during temporary file operations.(CVE-2025-7039)

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-
    based client subscribes to signals from a trusted system service such as NetworkManager on a shared
    computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will
    wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based
    client behaving incorrectly, with an application-dependent impact.(CVE-2024-34397)

    A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar()
    function. When the position at which to insert the character is large, the position will overflow, leading
    to a buffer underwrite.(CVE-2025-4373)

    A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO
    8601 timestamp with the g_date_time_new_from_iso8601() function.(CVE-2025-3360)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glib2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2026-1166
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b6e6bde5");
  script_set_attribute(attribute:"solution", value:
"Update the affected glib2 packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:N/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-7039");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/12/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/01/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/01/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:glib2");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:uvp:2.10.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Huawei Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/uvp_version");

  exit(0);
}

include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var _release = get_kb_item("Host/EulerOS/release");
if (isnull(_release) || _release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
var uvp = get_kb_item("Host/EulerOS/uvp_version");
if (uvp != "2.10.0") audit(AUDIT_OS_NOT, "EulerOS Virtualization 2.10.0");
if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu && "x86" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "x86" >!< cpu) audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu);

var flag = 0;

var pkgs = [
  "glib2-2.62.5-6.h22.eulerosv2r10"
];

foreach (var pkg in pkgs)
  if (rpm_check(release:"EulerOS-2.0", reference:pkg)) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_NOTE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "glib2");
}