Lucene search

K
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2020-105.NASL
HistoryJan 27, 2020 - 12:00 a.m.

openSUSE Security Update : libvpx (openSUSE-2020-105)

2020-01-2700:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.5%

This update for libvpx fixes the following issues :

  • CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).

  • CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).

  • CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).

  • CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).

  • CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).

This update was imported from the SUSE:SLE-15:Update update project.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2020-105.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('compat.inc');

if (description)
{
  script_id(133253);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/28");

  script_cve_id(
    "CVE-2019-2126",
    "CVE-2019-9232",
    "CVE-2019-9325",
    "CVE-2019-9371",
    "CVE-2019-9433"
  );

  script_name(english:"openSUSE Security Update : libvpx (openSUSE-2020-105)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"This update for libvpx fixes the following issues :

  - CVE-2019-2126: Fixed a double free in
    ParseContentEncodingEntry() (bsc#1160611).

  - CVE-2019-9325: Fixed an out-of-bounds read
    (bsc#1160612).

  - CVE-2019-9232: Fixed an out-of-bounds memory access on
    fuzzed data (bsc#1160613).

  - CVE-2019-9433: Fixed a use-after-free in vp8_deblock()
    (bsc#1160614).

  - CVE-2019-9371: Fixed a resource exhaustion after memory
    leak (bsc#1160615).

This update was imported from the SUSE:SLE-15:Update update project.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160611");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160612");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160613");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160614");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1160615");
  script_set_attribute(attribute:"solution", value:
"Update the affected libvpx packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-2126");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/08/20");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx4-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx4-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvpx4-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:vpx-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:vpx-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.1");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.1", reference:"libvpx-debugsource-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"libvpx-devel-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"libvpx4-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"libvpx4-debuginfo-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"vpx-tools-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"vpx-tools-debuginfo-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libvpx4-32bit-1.6.1-lp151.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libvpx4-32bit-debuginfo-1.6.1-lp151.5.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libvpx-debugsource / libvpx-devel / libvpx4 / libvpx4-debuginfo / etc");
}
VendorProductVersionCPE
novellopensuselibvpx-debugsourcep-cpe:/a:novell:opensuse:libvpx-debugsource
novellopensuselibvpx-develp-cpe:/a:novell:opensuse:libvpx-devel
novellopensuselibvpx4p-cpe:/a:novell:opensuse:libvpx4
novellopensuselibvpx4-32bitp-cpe:/a:novell:opensuse:libvpx4-32bit
novellopensuselibvpx4-32bit-debuginfop-cpe:/a:novell:opensuse:libvpx4-32bit-debuginfo
novellopensuselibvpx4-debuginfop-cpe:/a:novell:opensuse:libvpx4-debuginfo
novellopensusevpx-toolsp-cpe:/a:novell:opensuse:vpx-tools
novellopensusevpx-tools-debuginfop-cpe:/a:novell:opensuse:vpx-tools-debuginfo
novellopensuse15.1cpe:/o:novell:opensuse:15.1

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.5%