libarchive was updated to fix 20 security issues. These security issues were fixed :
CVE-2015-8918: Overlapping memcpy in CAB parser (bsc#985698).
CVE-2015-8919: Heap out of bounds read in LHA/LZH parser (bsc#985697).
CVE-2015-8920: Stack out of bounds read in ar parser (bsc#985675).
CVE-2015-8921: Global out of bounds read in mtree parser (bsc#985682).
CVE-2015-8922: NULL pointer access in 7z parser (bsc#985685).
CVE-2015-8923: Unclear crashes in ZIP parser (bsc#985703).
CVE-2015-8924: Heap buffer read overflow in tar (bsc#985609).
CVE-2015-8925: Unclear invalid memory read in mtree parser (bsc#985706).
CVE-2015-8926: NULL pointer access in RAR parser (bsc#985704).
CVE-2015-8928: Heap out of bounds read in mtree parser (bsc#985679).
CVE-2015-8929: Memory leak in tar parser (bsc#985669).
CVE-2015-8930: Endless loop in ISO parser (bsc#985700).
CVE-2015-8931: Undefined behavior / signed integer overflow in mtree parser (bsc#985689).
CVE-2015-8932: Compress handler left shifting larger than int size (bsc#985665).
CVE-2015-8933: Undefined behavior / signed integer overflow in TAR parser (bsc#985688).
CVE-2015-8934: Out of bounds read in RAR (bsc#985673).
CVE-2016-4300: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo (bsc#985832).
CVE-2016-4301: Stack buffer overflow in the mtree parse_device (bsc#985826).
CVE-2016-4302: Heap buffer overflow in the Rar decompression functionality (bsc#985835).
CVE-2016-4809: Memory allocate error with symbolic links in cpio archives (bsc#984990).
Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2016:1909-1.
# The text itself is copyright (C) SUSE.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(93185);
script_version("2.10");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");
script_cve_id("CVE-2015-8918", "CVE-2015-8919", "CVE-2015-8920", "CVE-2015-8921", "CVE-2015-8922", "CVE-2015-8923", "CVE-2015-8924", "CVE-2015-8925", "CVE-2015-8926", "CVE-2015-8928", "CVE-2015-8929", "CVE-2015-8930", "CVE-2015-8931", "CVE-2015-8932", "CVE-2015-8933", "CVE-2015-8934", "CVE-2016-4300", "CVE-2016-4301", "CVE-2016-4302", "CVE-2016-4809");
script_name(english:"SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2016:1909-1)");
script_summary(english:"Checks rpm output for the updated packages.");
script_set_attribute(
attribute:"synopsis",
value:"The remote SUSE host is missing one or more security updates."
);
script_set_attribute(
attribute:"description",
value:
"libarchive was updated to fix 20 security issues. These security
issues were fixed :
- CVE-2015-8918: Overlapping memcpy in CAB parser
(bsc#985698).
- CVE-2015-8919: Heap out of bounds read in LHA/LZH parser
(bsc#985697).
- CVE-2015-8920: Stack out of bounds read in ar parser
(bsc#985675).
- CVE-2015-8921: Global out of bounds read in mtree parser
(bsc#985682).
- CVE-2015-8922: NULL pointer access in 7z parser
(bsc#985685).
- CVE-2015-8923: Unclear crashes in ZIP parser
(bsc#985703).
- CVE-2015-8924: Heap buffer read overflow in tar
(bsc#985609).
- CVE-2015-8925: Unclear invalid memory read in mtree
parser (bsc#985706).
- CVE-2015-8926: NULL pointer access in RAR parser
(bsc#985704).
- CVE-2015-8928: Heap out of bounds read in mtree parser
(bsc#985679).
- CVE-2015-8929: Memory leak in tar parser (bsc#985669).
- CVE-2015-8930: Endless loop in ISO parser (bsc#985700).
- CVE-2015-8931: Undefined behavior / signed integer
overflow in mtree parser (bsc#985689).
- CVE-2015-8932: Compress handler left shifting larger
than int size (bsc#985665).
- CVE-2015-8933: Undefined behavior / signed integer
overflow in TAR parser (bsc#985688).
- CVE-2015-8934: Out of bounds read in RAR (bsc#985673).
- CVE-2016-4300: Heap buffer overflow vulnerability in the
7zip read_SubStreamsInfo (bsc#985832).
- CVE-2016-4301: Stack buffer overflow in the mtree
parse_device (bsc#985826).
- CVE-2016-4302: Heap buffer overflow in the Rar
decompression functionality (bsc#985835).
- CVE-2016-4809: Memory allocate error with symbolic links
in cpio archives (bsc#984990).
Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=984990"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985609"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985665"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985669"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985673"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985675"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985679"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985682"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985685"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985688"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985689"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985697"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985698"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985700"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985703"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985704"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985706"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985826"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985832"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.suse.com/show_bug.cgi?id=985835"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8918/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8919/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8920/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8921/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8922/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8923/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8924/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8925/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8926/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8928/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8929/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8930/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8931/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8932/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8933/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2015-8934/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2016-4300/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2016-4301/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2016-4302/"
);
script_set_attribute(
attribute:"see_also",
value:"https://www.suse.com/security/cve/CVE-2016-4809/"
);
# https://www.suse.com/support/update/announcement/2016/suse-su-20161909-1/
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?62166a5b"
);
script_set_attribute(
attribute:"solution",
value:
"To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product :
SUSE Linux Enterprise Software Development Kit 12-SP1:zypper in -t
patch SUSE-SLE-SDK-12-SP1-2016-1123=1
SUSE Linux Enterprise Server 12-SP1:zypper in -t patch
SUSE-SLE-SERVER-12-SP1-2016-1123=1
SUSE Linux Enterprise Desktop 12-SP1:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP1-2016-1123=1
To bring your system up-to-date, use 'zypper patch'."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libarchive-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libarchive13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libarchive13-debuginfo");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");
script_set_attribute(attribute:"vuln_publication_date", value:"2016/09/20");
script_set_attribute(attribute:"patch_publication_date", value:"2016/07/29");
script_set_attribute(attribute:"plugin_publication_date", value:"2016/08/29");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"SuSE Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);
sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP1", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP1", os_ver + " SP" + sp);
flag = 0;
if (rpm_check(release:"SLES12", sp:"1", reference:"libarchive-debugsource-3.1.2-22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libarchive13-3.1.2-22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libarchive13-debuginfo-3.1.2-22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"1", cpu:"x86_64", reference:"libarchive-debugsource-3.1.2-22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"1", cpu:"x86_64", reference:"libarchive13-3.1.2-22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"1", cpu:"x86_64", reference:"libarchive13-debuginfo-3.1.2-22.1")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libarchive");
}
Vendor | Product | Version | CPE |
---|---|---|---|
novell | suse_linux | libarchive-debugsource | p-cpe:/a:novell:suse_linux:libarchive-debugsource |
novell | suse_linux | libarchive13 | p-cpe:/a:novell:suse_linux:libarchive13 |
novell | suse_linux | libarchive13-debuginfo | p-cpe:/a:novell:suse_linux:libarchive13-debuginfo |
novell | suse_linux | 12 | cpe:/o:novell:suse_linux:12 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8918
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8919
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8920
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8921
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8922
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8923
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8924
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8925
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8926
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8928
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8929
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8930
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8931
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8932
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8933
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8934
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4300
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4301
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4302
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4809
www.nessus.org/u?62166a5b
bugzilla.suse.com/show_bug.cgi?id=984990
bugzilla.suse.com/show_bug.cgi?id=985609
bugzilla.suse.com/show_bug.cgi?id=985665
bugzilla.suse.com/show_bug.cgi?id=985669
bugzilla.suse.com/show_bug.cgi?id=985673
bugzilla.suse.com/show_bug.cgi?id=985675
bugzilla.suse.com/show_bug.cgi?id=985679
bugzilla.suse.com/show_bug.cgi?id=985682
bugzilla.suse.com/show_bug.cgi?id=985685
bugzilla.suse.com/show_bug.cgi?id=985688
bugzilla.suse.com/show_bug.cgi?id=985689
bugzilla.suse.com/show_bug.cgi?id=985697
bugzilla.suse.com/show_bug.cgi?id=985698
bugzilla.suse.com/show_bug.cgi?id=985700
bugzilla.suse.com/show_bug.cgi?id=985703
bugzilla.suse.com/show_bug.cgi?id=985704
bugzilla.suse.com/show_bug.cgi?id=985706
bugzilla.suse.com/show_bug.cgi?id=985826
bugzilla.suse.com/show_bug.cgi?id=985832
bugzilla.suse.com/show_bug.cgi?id=985835
www.suse.com/security/cve/CVE-2015-8918/
www.suse.com/security/cve/CVE-2015-8919/
www.suse.com/security/cve/CVE-2015-8920/
www.suse.com/security/cve/CVE-2015-8921/
www.suse.com/security/cve/CVE-2015-8922/
www.suse.com/security/cve/CVE-2015-8923/
www.suse.com/security/cve/CVE-2015-8924/
www.suse.com/security/cve/CVE-2015-8925/
www.suse.com/security/cve/CVE-2015-8926/
www.suse.com/security/cve/CVE-2015-8928/
www.suse.com/security/cve/CVE-2015-8929/
www.suse.com/security/cve/CVE-2015-8930/
www.suse.com/security/cve/CVE-2015-8931/
www.suse.com/security/cve/CVE-2015-8932/
www.suse.com/security/cve/CVE-2015-8933/
www.suse.com/security/cve/CVE-2015-8934/
www.suse.com/security/cve/CVE-2016-4300/
www.suse.com/security/cve/CVE-2016-4301/
www.suse.com/security/cve/CVE-2016-4302/
www.suse.com/security/cve/CVE-2016-4809/