Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2016-2021 Tenable Network Security, Inc.OPENSUSE-2016-1194.NASL
HistoryOct 17, 2016 - 12:00 a.m.

openSUSE Security Update : systemd (openSUSE-2016-1194)

2016-10-1700:00:00
This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.
www.tenable.com
13
JSON

This update for systemd fixes the following security issue :

  • CVE-2016-7796: A zero-length message received over systemd’s notification socket could make manager_dispatch_notify_fd() return an error and, as a side effect, disable the notification handler completely. As the notification socket is world-writable, this could have allowed a local user to perform a denial-of-service attack against systemd.
    (bsc#1001765)

Additionally, the following non-security fixes are included :

  • Fix HMAC calculation when appending a data object to journal. (bsc#1000435)

  • Never accept file descriptors from file systems with mandatory locking enabled. (bsc#954374)

  • Do not warn about missing install info with ‘preset’.
    (bsc#970293)

  • Save /run/systemd/users/UID before starting [email protected]. (bsc#996269)

  • Make sure that /var/lib/systemd/sysv-convert/database is always initialized. (bsc#982211)

  • Remove daylight saving time handling and tzfile parser.
    (bsc#990074)

  • Make sure directory watch is started before cryptsetup.
    (bsc#987173)

  • Introduce sd_pid_notify() and sd_pid_notifyf() APIs.
    (bsc#987857)

  • Set KillMode=mixed for our daemons that fork worker processes.

  • Add nosuid and nodev options to tmp.mount.

  • Don’t start console-getty.service when /dev/console is missing. (bsc#982251)

  • Correct segmentation fault in udev/path_id due to missing NULL check. (bsc#982210)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2016-1194.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(94090);
  script_version("2.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2016-7796");

  script_name(english:"openSUSE Security Update : systemd (openSUSE-2016-1194)");
  script_summary(english:"Check for the openSUSE-2016-1194 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for systemd fixes the following security issue :

  - CVE-2016-7796: A zero-length message received over
    systemd's notification socket could make
    manager_dispatch_notify_fd() return an error and, as a
    side effect, disable the notification handler
    completely. As the notification socket is
    world-writable, this could have allowed a local user to
    perform a denial-of-service attack against systemd.
    (bsc#1001765)

Additionally, the following non-security fixes are included :

  - Fix HMAC calculation when appending a data object to
    journal. (bsc#1000435)

  - Never accept file descriptors from file systems with
    mandatory locking enabled. (bsc#954374)

  - Do not warn about missing install info with 'preset'.
    (bsc#970293) 

  - Save /run/systemd/users/UID before starting
    [email protected]. (bsc#996269)

  - Make sure that /var/lib/systemd/sysv-convert/database is
    always initialized. (bsc#982211)

  - Remove daylight saving time handling and tzfile parser.
    (bsc#990074)

  - Make sure directory watch is started before cryptsetup.
    (bsc#987173)

  - Introduce sd_pid_notify() and sd_pid_notifyf() APIs.
    (bsc#987857)

  - Set KillMode=mixed for our daemons that fork worker
    processes.

  - Add nosuid and nodev options to tmp.mount.

  - Don't start console-getty.service when /dev/console is
    missing. (bsc#982251)

  - Correct segmentation fault in udev/path_id due to
    missing NULL check. (bsc#982210)

This update was imported from the SUSE:SLE-12-SP1:Update update
project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1000435"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1001765"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=954374"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=970293"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=982210"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=982211"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=982251"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=987173"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=987857"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=990074"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=996269"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected systemd packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgudev-1_0-0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgudev-1_0-0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgudev-1_0-0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgudev-1_0-0-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgudev-1_0-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-bash-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-journal-gateway");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-journal-gateway-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-logger");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-sysvinit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-sysvinit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:typelib-1_0-GUdev-1_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:42.1");

  script_set_attribute(attribute:"patch_publication_date", value:"2016/10/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2016/10/17");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE42\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "42.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE42.1", reference:"libgudev-1_0-0-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libgudev-1_0-0-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libgudev-1_0-devel-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev-devel-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev-mini-devel-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev-mini1-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev-mini1-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev1-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"libudev1-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"nss-myhostname-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"nss-myhostname-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-bash-completion-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-debugsource-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-devel-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-journal-gateway-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-journal-gateway-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-logger-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-mini-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-mini-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-mini-debugsource-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-mini-devel-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-mini-sysvinit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"systemd-sysvinit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"typelib-1_0-GUdev-1_0-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"udev-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"udev-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"udev-mini-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", reference:"udev-mini-debuginfo-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libgudev-1_0-0-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libgudev-1_0-0-debuginfo-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libudev1-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"libudev1-debuginfo-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"nss-myhostname-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"nss-myhostname-debuginfo-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"systemd-32bit-210-98.1") ) flag++;
if ( rpm_check(release:"SUSE42.1", cpu:"x86_64", reference:"systemd-debuginfo-32bit-210-98.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libudev-mini-devel / libudev-mini1 / libudev-mini1-debuginfo / etc");
}
VendorProductVersionCPE
novellopensuselibgudev-1_0-0p-cpe:/a:novell:opensuse:libgudev-1_0-0
novellopensuselibgudev-1_0-0-32bitp-cpe:/a:novell:opensuse:libgudev-1_0-0-32bit
novellopensuselibgudev-1_0-0-debuginfop-cpe:/a:novell:opensuse:libgudev-1_0-0-debuginfo
novellopensuselibgudev-1_0-0-debuginfo-32bitp-cpe:/a:novell:opensuse:libgudev-1_0-0-debuginfo-32bit
novellopensuselibgudev-1_0-develp-cpe:/a:novell:opensuse:libgudev-1_0-devel
novellopensuselibudev-develp-cpe:/a:novell:opensuse:libudev-devel
novellopensuselibudev-mini-develp-cpe:/a:novell:opensuse:libudev-mini-devel
novellopensuselibudev-mini1p-cpe:/a:novell:opensuse:libudev-mini1
novellopensuselibudev-mini1-debuginfop-cpe:/a:novell:opensuse:libudev-mini1-debuginfo
novellopensuselibudev1p-cpe:/a:novell:opensuse:libudev1
Rows per page:
1-10 of 391

Related

prion 1
openvas 8
cve 1
nessus 2
ubuntucve 2
debiancve 1
redhatcve 2
redhat 1
cvelist 1
fedora 1
prion
prion
Design/Logic Flaw
2016-10-13 14:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:2476-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2475-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for systemd (openSUSE-SU-2016:2522-1)
2016-10-14 00:00:00
cve
cve
CVE-2016-7796
2016-10-13 14:59:14
nessus
nessus
RHEL 7 : systemd (RHSA-2017:0003)
2017-01-05 00:00:00
openSUSE Security Update : systemd (openSUSE-2016-1184)
2016-10-14 00:00:00
ubuntucve
ubuntucve
CVE-2016-7796
2016-10-13 00:00:00
CVE-2016-7795
2016-10-13 00:00:00
debiancve
debiancve
CVE-2016-7796
2016-10-13 14:59:14
redhatcve
redhatcve
CVE-2016-7796
2016-10-05 11:17:18
CVE-2016-7795
2016-09-30 08:17:35
redhat
redhat
(RHSA-2017:0003) Moderate: systemd security update
2017-01-03 16:31:05
cvelist
cvelist
CVE-2016-7796
2016-10-13 14:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: systemd-229-15.fc24
2016-10-03 03:51:35
JSON
Related for OPENSUSE-2016-1194.NASL
prion1openvas8cve1nessus2ubuntucve2debiancve1redhatcve2redhat1cvelist1fedora1