openSUSE 16: containerized-data-importer1.65-api / etc (openSUSE-SU-2026:21824-1)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# openSUSE Security Update openSUSE-SU-2026:21824-1. The text itself
# is copyright (C) SUSE.
##

include('compat.inc');

if (description)
{
  script_id(344999);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/12");

  script_cve_id(
    "CVE-2025-22869",
    "CVE-2025-22870",
    "CVE-2025-22872",
    "CVE-2025-47911",
    "CVE-2025-47913",
    "CVE-2025-47914",
    "CVE-2025-58058",
    "CVE-2025-58181",
    "CVE-2025-58190",
    "CVE-2026-25680",
    "CVE-2026-25681",
    "CVE-2026-27136",
    "CVE-2026-33186",
    "CVE-2026-33814",
    "CVE-2026-34986",
    "CVE-2026-35469",
    "CVE-2026-39821",
    "CVE-2026-39827",
    "CVE-2026-39828",
    "CVE-2026-39829",
    "CVE-2026-39830",
    "CVE-2026-39831",
    "CVE-2026-39832",
    "CVE-2026-39833",
    "CVE-2026-39834",
    "CVE-2026-39835",
    "CVE-2026-41178",
    "CVE-2026-42502",
    "CVE-2026-42506",
    "CVE-2026-42508",
    "CVE-2026-46595",
    "CVE-2026-46597",
    "CVE-2026-46598",
    "CVE-2026-56852",
    "CVE-2026-56854",
    "CVE-2026-56855",
    "CVE-2026-78662",
    "CVE-2026-84303",
    "CVE-2026-84304"
  );

  script_name(english:"openSUSE 16: containerized-data-importer1.65-api / etc (openSUSE-SU-2026:21824-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the
openSUSE-SU-2026:21824-1 advisory.

    - CVE-2025-22869: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).
    - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238699).
    - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong
    scope during
      DOM construction (bsc#1241838).
    - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML
    documents
      (bsc#1251495).
    - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a
    key listing or
      (bsc#1253506).
    - CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1253967).
    - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946).
    - CVE-2025-58181: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253784).
    - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when
    processing specially
      crafted input (bsc#1251689).
    - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html:
    multiple issues
      when parsing HTML files (bsc#1267176).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2
    :path pseudo-
      header (bsc#1260295).
    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad
    SETTINGS_MAX_FRAME_SIZE
      (bsc#1265799).
    - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead
    to a denial of
      service (bsc#1262952).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial
    of service
      (bsc#1262269).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for
    validation
      bypass and privilege escalation (bsc#1266639).
    -
    CVE-2026-39827,CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-39833,
      CVE-2026-39834,CVE-2026-39835,CVE-2026-42508,CVE-2026-46595,CVE-2026-46597,
      CVE-2026-46598: multiple issues in golang.org/x/crypto/ssh (bsc#1266179).
    - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing
    allows for DoS
      via oversized inputs (bsc#1276687).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input
    (bsc#1272064).
    - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and
    deadlocks in the
      crypto/ssh library (bsc#1278621).
    - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of
    authorization
      policies via mixed-case or canonical-case header matches (bsc#1279315).
    - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation
    (bsc#1279234).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1238699");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1239322");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1241838");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1248946");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1251495");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1251689");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1253506");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1253784");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1253967");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1260295");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1262269");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1262952");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1265799");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1266179");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1266639");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1267176");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1272064");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1276687");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1278621");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1279234");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1279315");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-22869");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-22870");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-22872");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-47911");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-47913");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-47914");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-58058");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-58181");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2025-58190");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-25680");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-25681");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-27136");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-33186");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-33814");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-34986");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-35469");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39821");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39827");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39828");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39829");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39830");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39831");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39832");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39833");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39834");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-39835");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-41178");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-42502");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-42506");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-42508");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-46595");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-46597");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-46598");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-56852");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-56854");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-56855");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-78662");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-84303");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-84304");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-33814");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-84304");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/02/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-api");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-cloner");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-controller");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-importer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-manifests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-operator");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-uploadproxy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerized-data-importer1.65-uploadserver");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:obs-service-cdi1.65_containers_meta");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:16.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/SuSE/release');
if (isnull(os_release) || os_release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, 'openSUSE');
var _os_ver = pregmatch(pattern: "^SUSE([\d.]+)", string:os_release);
if (isnull(_os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'openSUSE');
_os_ver = _os_ver[1];
if (os_release !~ "^(SUSE16\.0)$") audit(AUDIT_OS_RELEASE_NOT, 'openSUSE', '16.0', os_release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'openSUSE ' + _os_ver, cpu);

var pkgs = [
    {'reference':'containerized-data-importer1.65-api-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-api-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-cloner-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-cloner-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-controller-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-controller-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-importer-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-importer-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-manifests-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-manifests-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-operator-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-operator-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-uploadproxy-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-uploadproxy-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-uploadserver-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'containerized-data-importer1.65-uploadserver-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'obs-service-cdi1.65_containers_meta-1.65.0-160000.3.1', 'cpu':'aarch64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'obs-service-cdi1.65_containers_meta-1.65.0-160000.3.1', 'cpu':'x86_64', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var _cpu = NULL;
  var rpm_spec_vers_cmp = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (reference && _release) {
    if (rpm_check(release:_release, cpu:_cpu, reference:reference, rpm_spec_vers_cmp:rpm_spec_vers_cmp)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'containerized-data-importer1.65-api / etc');
}