Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2019-0586-1.NASL
HistoryMar 13, 2019 - 12:00 a.m.

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2019:0586-1)

2019-03-1300:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22
JSON

This update for ceph version 13.2.4 fixes the following issues :

Security issues fixed :

CVE-2018-14662: Fixed an issue with LUKS ‘config-key’ safety (bsc#1111177)

CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)

CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)

CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)

CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw

Non-security issues fixed: ceph-volume Python 3 fixes (bsc#1114567)

fix python3 module loading (bsc#1086613)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:0586-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(122809);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/13");

  script_cve_id("CVE-2018-10861", "CVE-2018-1128", "CVE-2018-1129", "CVE-2018-14662", "CVE-2018-16846");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2019:0586-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis",
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description",
    value:
"This update for ceph version 13.2.4 fixes the following issues :

Security issues fixed :

CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety
(bsc#1111177)

CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in
ceph-mon (bsc#1099162)

CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)

CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)

CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in
rgw

Non-security issues fixed: ceph-volume Python 3 fixes (bsc#1114567)

fix python3 module loading (bsc#1086613)

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1084645"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1086613"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1096748"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1099162"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1101262"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1111177"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1114567"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-10861/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-1128/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-1129/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-14662/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2018-16846/"
  );
  # https://www.suse.com/support/update/announcement/2019/suse-su-20190586-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?c3125034"
  );
  script_set_attribute(
    attribute:"solution",
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-2019-586=1

SUSE Linux Enterprise Module for Basesystem 15:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-2019-586=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-base-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-common-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-fuse-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mds-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mgr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mgr-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-mon-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-osd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-osd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-radosgw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-radosgw-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ceph-resource-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libcephfs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libcephfs2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libcephfs2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librados-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librados-devel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librados2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librados2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libradosstriper-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libradosstriper1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libradosstriper1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librbd-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librbd1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librbd1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librgw-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librgw2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:librgw2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-cephfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-cephfs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rados");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rados-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rbd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rgw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-rgw-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rados-objclass-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-fuse-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-mirror");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-mirror-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-nbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:rbd-nbd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/07/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/03/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/03/13");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-base-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-base-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-common-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-common-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-debugsource-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-fuse-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-fuse-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mds-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mds-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mgr-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mgr-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mon-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-mon-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-osd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-osd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-radosgw-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-radosgw-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ceph-resource-agents-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libcephfs-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libcephfs2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libcephfs2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librados-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librados-devel-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librados2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librados2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libradosstriper-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libradosstriper1-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libradosstriper1-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librbd-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librbd1-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librbd1-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librgw-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librgw2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"librgw2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-cephfs-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-cephfs-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rados-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rados-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rbd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rbd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rgw-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-rgw-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rados-objclass-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-fuse-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-fuse-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-mirror-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-mirror-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-nbd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"rbd-nbd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-base-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-base-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-common-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-common-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-debugsource-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-fuse-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-fuse-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mds-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mds-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mgr-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mgr-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mon-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-mon-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-osd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-osd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-radosgw-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-radosgw-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ceph-resource-agents-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libcephfs-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libcephfs2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libcephfs2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librados-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librados-devel-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librados2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librados2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libradosstriper-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libradosstriper1-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libradosstriper1-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librbd-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librbd1-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librbd1-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librgw-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librgw2-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"librgw2-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-cephfs-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-cephfs-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rados-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rados-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rbd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rbd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rgw-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-rgw-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rados-objclass-devel-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-fuse-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-fuse-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-mirror-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-mirror-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-nbd-13.2.4.125+gad802694f5-3.7.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"rbd-nbd-debuginfo-13.2.4.125+gad802694f5-3.7.2")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ceph");
}
VendorProductVersionCPE
novellsuse_linuxcephp-cpe:/a:novell:suse_linux:ceph
novellsuse_linuxceph-basep-cpe:/a:novell:suse_linux:ceph-base
novellsuse_linuxceph-base-debuginfop-cpe:/a:novell:suse_linux:ceph-base-debuginfo
novellsuse_linuxceph-commonp-cpe:/a:novell:suse_linux:ceph-common
novellsuse_linuxceph-common-debuginfop-cpe:/a:novell:suse_linux:ceph-common-debuginfo
novellsuse_linuxceph-debugsourcep-cpe:/a:novell:suse_linux:ceph-debugsource
novellsuse_linuxceph-fusep-cpe:/a:novell:suse_linux:ceph-fuse
novellsuse_linuxceph-fuse-debuginfop-cpe:/a:novell:suse_linux:ceph-fuse-debuginfo
novellsuse_linuxceph-mdsp-cpe:/a:novell:suse_linux:ceph-mds
novellsuse_linuxceph-mds-debuginfop-cpe:/a:novell:suse_linux:ceph-mds-debuginfo
Rows per page:
1-10 of 511

Related

nessus 33
openvas 16
suse 5
fedora 3
redhat 6
osv 11
debian 4
photon 5
ubuntu 2
debiancve 6
cve 6
redhatcve 6
prion 6
ubuntucve 6
veracode 5
cbl_mariner 1
mageia 3
alpinelinux 1
archlinux 1
nessus
nessus
openSUSE Security Update : ceph (openSUSE-2019-1284)
2019-04-29 00:00:00
openSUSE Security Update : ceph (openSUSE-2018-854)
2018-08-10 00:00:00
SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2018:2193-1)
2018-08-06 00:00:00
openvas
openvas
openSUSE: Security Advisory for ceph (openSUSE-SU-2019:1284-1)
2019-04-28 00:00:00
openSUSE: Security Advisory for ceph (openSUSE-SU-2018:2283-1)
2018-08-10 00:00:00
Fedora Update for ceph FEDORA-2018-8738f5f4a7
2018-08-07 00:00:00
suse
suse
Security update for ceph (moderate)
2019-04-28 00:00:00
Security update for ceph (important)
2018-08-10 03:07:22
Security update for ceph (important)
2019-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: ceph-12.2.7-1.fc27
2018-08-07 00:12:20
[SECURITY] Fedora 28 Update: ceph-12.2.6-1.fc28
2018-07-18 18:32:39
[SECURITY] Fedora 29 Update: ceph-12.2.11-1.fc29
2019-02-20 03:07:29
redhat
redhat
(RHSA-2018:2177) Moderate: Red Hat Ceph Storage 3.0 security and bug fix update
2018-07-11 17:59:08
(RHSA-2018:2274) Moderate: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update
2018-07-26 15:34:33
(RHSA-2018:2179) Moderate: Red Hat Ceph Storage 3.0 security and bug fix update
2018-07-11 18:20:07
osv
osv
ceph - security update
2019-02-28 00:00:00
ceph - security update
2018-11-13 00:00:00
CVE-2018-10861
2018-07-10 14:29:00
debian
debian
[SECURITY] [DLA 1696-1] ceph security update
2019-03-01 17:52:22
[SECURITY] [DLA 2735-1] ceph security update
2021-08-10 22:05:10
[SECURITY] [DSA 4339-1] ceph security update
2018-11-13 21:48:36
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0237
2020-05-01 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0237
2020-04-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0104
2018-10-18 00:00:00
ubuntu
ubuntu
Ceph vulnerabilities
2019-06-25 00:00:00
Ceph vulnerabilities
2021-01-28 00:00:00
debiancve
debiancve
CVE-2018-10861
2018-07-10 14:29:00
CVE-2018-14662
2019-01-15 21:29:00
CVE-2018-16846
2019-01-15 18:29:00
cve
cve
CVE-2018-10861
2018-07-10 14:29:00
CVE-2018-14662
2019-01-15 21:29:00
CVE-2018-16846
2019-01-15 18:29:00
redhatcve
redhatcve
CVE-2018-14662
2019-01-14 15:52:15
CVE-2018-10861
2021-08-14 22:35:41
CVE-2018-16846
2019-01-14 15:51:31
prion
prion
Design/Logic Flaw
2018-07-10 14:29:00
Code injection
2019-01-15 21:29:00
Denial of service
2019-01-15 18:29:00
ubuntucve
ubuntucve
CVE-2018-10861
2018-07-10 00:00:00
CVE-2018-14662
2019-01-15 00:00:00
CVE-2018-16846
2019-01-15 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 09:24:15
Information Disclosure
2019-08-22 02:27:55
Denial Of Service (Dos)
2019-08-22 02:27:56
cbl_mariner
cbl_mariner
CVE-2018-1129 affecting package ceph 16.2.10-3
2024-04-17 22:02:46
mageia
mageia
Updated kernel packages fix security vulnerabilities
2018-12-22 00:28:39
Updated kernel-linus packages fix security vulnerabilities
2019-02-21 02:50:36
Updated kernel-tmb packages fixes security vulnerabilities
2019-05-16 11:25:22
alpinelinux
alpinelinux
CVE-2020-25660
2020-11-23 22:15:00
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00
JSON
Related for SUSE_SU-2019-0586-1.NASL
nessus33openvas16suse5fedora3redhat6osv11debian4photon5ubuntu2debiancve6cve6redhatcve6prion6ubuntucve6veracode5cbl_mariner1mageia3alpinelinux1archlinux1