Photon OS 1.0: Dnsmasq PHSA-2017-0035 (deprecated)
🗓️ 17 Aug 2018 00:00:00Reported by This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.Type
nessus🔗 www.tenable.com👁 28 Views
| Reporter | Title | Published | Views | Family All 302 |
|---|---|---|---|---|
| Dnsmasq < 2.78 - 2-byte Heap-Based Overflow Exploit | 2 Oct 201700:00 | – | zdt | |
| Dnsmasq < 2.78 - Heap-Based Overflow Exploit | 2 Oct 201700:00 | – | zdt | |
| Dnsmasq < 2.78 - Stack-Based Overflow Exploit | 2 Oct 201700:00 | – | zdt | |
| Dnsmasq < 2.78 - Information Leak Exploit | 2 Oct 201700:00 | – | zdt | |
| Dnsmasq < 2.78 - Lack of free() Denial of Service Exploit | 2 Oct 201700:00 | – | zdt | |
| Dnsmasq < 2.78 - Integer Underflow Exploit | 2 Oct 201700:00 | – | zdt | |
| Security fix for the ALT Linux 10 package dnsmasq version 2.78-alt1 | 6 Oct 201700:00 | – | altlinux | |
| Security Bulletin: Multiple security vulnerabilities in IBM Cloud Manager with OpenStack affect IBM Cloud Orchestrator and Cloud Orchestrator Enterprise | 17 Jun 201822:33 | – | ibm | |
| Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack | 8 Aug 201804:13 | – | ibm | |
| Amazon Linux 2 : dnsmasq (ALAS-2019-1251) | 24 Jul 201900:00 | – | nessus |
10
#
# (C) Tenable Network Security, Inc.
#
# @DEPRECATED@
#
# Disabled on 2/7/2019
#
# The descriptive text and package checks in this plugin were
# extracted from VMware Security Advisory PHSA-2017-0035. The text
# itself is copyright (C) VMware, Inc.
include("compat.inc");
if (description)
{
script_id(111884);
script_version("1.3");
script_cvs_date("Date: 2019/04/05 23:25:07");
script_cve_id(
"CVE-2017-14491",
"CVE-2017-14492",
"CVE-2017-14493",
"CVE-2017-14494",
"CVE-2017-14495",
"CVE-2017-14496"
);
script_name(english:"Photon OS 1.0: Dnsmasq PHSA-2017-0035 (deprecated)");
script_summary(english:"Checks the rpm output for the updated packages.");
script_set_attribute(attribute:"synopsis", value:
"This plugin has been deprecated.");
script_set_attribute(attribute:"description", value:
"An update of [dnsmasq] packages for PhotonOS has been released.");
# https://github.com/vmware/photon/wiki/Security-Updates-74
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?56e443b9");
script_set_attribute(attribute:"solution", value:"n/a.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-14496");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"patch_publication_date", value:"2017/10/02");
script_set_attribute(attribute:"plugin_publication_date", value:"2018/08/17");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:vmware:photonos:dnsmasq");
script_set_attribute(attribute:"cpe", value:"cpe:/o:vmware:photonos:1.0");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"PhotonOS Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/PhotonOS/release", "Host/PhotonOS/rpm-list");
exit(0);
}
exit(0, "This plugin has been deprecated.");
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/PhotonOS/release");
if (isnull(release) || release !~ "^VMware Photon") audit(AUDIT_OS_NOT, "PhotonOS");
if (release !~ "^VMware Photon (?:Linux|OS) 1\.0(\D|$)") audit(AUDIT_OS_NOT, "PhotonOS 1.0");
if (!get_kb_item("Host/PhotonOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "PhotonOS", cpu);
flag = 0;
pkgs = [
"dnsmasq-2.76-2.ph1",
"dnsmasq-debuginfo-2.76-2.ph1"
];
foreach (pkg in pkgs)
if (rpm_check(release:"PhotonOS-1.0", reference:pkg)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "dnsmasq");
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Apr 2019 00:00Current
0.2Low risk
Vulners AI Score0.2
CVSS 27.8
CVSS 37.5
EPSS0.91406