Fedora 22 security update for krb5-1.13.1-2.fc22 (2015-5949) fixes CVE-2014-535
Reporter | Title | Published | Views | Family All 78 |
---|---|---|---|---|
![]() | [ MDVSA-2015:009 ] krb5 | 13 Jan 201500:00 | – | securityvulns |
![]() | MIT Kerberos 5 DoS | 13 Jan 201500:00 | – | securityvulns |
![]() | Mandriva Linux Security Advisory : krb5 (MDVSA-2015:009) | 9 Jan 201500:00 | – | nessus |
![]() | FreeBSD : krb5 -- Vulnerabilities in kadmind, libgssrpc, gss_process_context_token VU#540092 (3a888a1e-b321-11e4-83b2-206a8a720317) | 13 Feb 201500:00 | – | nessus |
![]() | Fedora 21 : krb5-1.12.2-17.fc21 (2015-7878) | 22 Jun 201500:00 | – | nessus |
![]() | openSUSE Security Update : krb5 (openSUSE-2015-246) | 20 Mar 201500:00 | – | nessus |
![]() | SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:1282-1) | 24 Jul 201500:00 | – | nessus |
![]() | OracleVM 3.3 / 3.4 : krb5 (OVMSA-2016-0039) | 24 Mar 201600:00 | – | nessus |
![]() | SUSE SLES12 Security Update : krb5 (SUSE-SU-2015:1276-1) | 22 Jul 201500:00 | – | nessus |
![]() | Oracle Linux 6 : krb5 (ELSA-2015-0794) | 10 Apr 201500:00 | – | nessus |
Source | Link |
---|---|
nessus | www.nessus.org/u |
cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2015-5949.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(83012);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2014-5353");
script_bugtraq_id(71679);
script_xref(name:"FEDORA", value:"2015-5949");
script_name(english:"Fedora 22 : krb5-1.13.1-2.fc22 (2015-5949)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Security fix for CVE-2014-5353 (this was fixed in an older build but
the announcement was lost)
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1174543"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155828.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?f20e3993"
);
script_set_attribute(attribute:"solution", value:"Update the affected krb5 package.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:krb5");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:22");
script_set_attribute(attribute:"patch_publication_date", value:"2015/04/10");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/04/23");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^22([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 22.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC22", reference:"krb5-1.13.1-2.fc22")) flag++;
if (flag)
{
if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
else security_note(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "krb5");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo