Update libssh2 to version 1.5.0-1.fc22 with security fixes
Reporter | Title | Published | Views | Family All 56 |
---|---|---|---|---|
![]() | [SECURITY] [DLA 171-1] libssh2 security update | 14 Mar 201518:15 | – | debian |
![]() | [SECURITY] [DSA 3182-1] libssh2 security update | 11 Mar 201511:04 | – | debian |
![]() | [SECURITY] [DSA 3182-1] libssh2 security update | 11 Mar 201511:04 | – | debian |
![]() | CVE-2015-1782 | 13 Mar 201514:59 | – | debiancve |
![]() | [SECURITY] Fedora 21 Update: libssh2-1.5.0-1.fc21 | 19 Mar 201518:44 | – | fedora |
![]() | [SECURITY] Fedora 20 Update: libssh2-1.5.0-1.fc20 | 30 Mar 201507:12 | – | fedora |
![]() | [SECURITY] Fedora 22 Update: libssh2-1.5.0-1.fc22 | 15 Mar 201510:52 | – | fedora |
![]() | libssh2 -- denial of service vulnerability | 25 Jan 201500:00 | – | freebsd |
![]() | Security Bulletin: Vulnerability in libssh2 affects PowerKVM (CVE-2015-1782) | 18 Jun 201801:30 | – | ibm |
![]() | Security Bulletin: Vulnerability in libssh2 affects SAN Volume Controller and Storwize Family (CVE-2015-1782) | 29 Mar 202301:48 | – | ibm |
Source | Link |
---|---|
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
nessus | www.nessus.org/u |
libssh2 | www.libssh2.org/adv_20150311.html |
cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2015-3757.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(81866);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2015-1782");
script_bugtraq_id(73061);
script_xref(name:"FEDORA", value:"2015-3757");
script_name(english:"Fedora 22 : libssh2-1.5.0-1.fc22 (2015-3757)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"This update, to the current upstream release version, contains
numerous bug fixes and enhancements as described in the RELEASE-NOTES
file.
These include a security fix for CVE-2015-1782 :
A malicious attacker could man in the middle a real server and cause
libssh2-using clients to crash (denial of service) or otherwise read
and use completely unintended memory areas in this process. There are
no known exploits of this flaw at this time.
See http://www.libssh2.org/adv_20150311.html for further details.
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
# http://www.libssh2.org/adv_20150311.html
script_set_attribute(
attribute:"see_also",
value:"https://www.libssh2.org/adv_20150311.html"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1199511"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2015-March/151943.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?3930a525"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected libssh2 package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:libssh2");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:22");
script_set_attribute(attribute:"patch_publication_date", value:"2015/03/13");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/03/17");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^22([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 22.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC22", reference:"libssh2-1.5.0-1.fc22")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libssh2");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo