| Reporter | Title | Published | Views | Family All 55 |
|---|---|---|---|---|
| Linux Kernel < 4.15.4 - show_floppy KASLR Address Leak Exploit | 22 Mar 201800:00 | – | zdt | |
| Linux Kernel 'drivers/block/floppy.c' Security Restriction Bypass Vulnerability | 8 Mar 201800:00 | – | cnvd | |
| CVE-2018-7273 | 21 Feb 201800:00 | – | cve | |
| CVE-2018-7273 | 21 Feb 201800:00 | – | cvelist | |
| CVE-2018-7273 | 21 Feb 201800:00 | – | debiancve | |
| EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1503) | 13 May 201900:00 | – | nessus | |
| EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-1112) | 24 Feb 202000:00 | – | nessus | |
| RHEL 7 : kernel (Unpatched Vulnerability) | 11 May 202400:00 | – | nessus | |
| RHEL 8 : kernel (Unpatched Vulnerability) | 11 May 202400:00 | – | nessus | |
| RHEL 7 : kernel (Unpatched Vulnerability) | 3 Jun 202400:00 | – | nessus |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(222696);
script_version("1.5");
script_set_attribute(attribute:"plugin_modification_date", value:"2025/12/19");
script_cve_id("CVE-2018-7273");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2018-7273");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global
variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can
read this information from dmesg and use the addresses to find the locations of kernel code and data and
bypass kernel security protections such as KASLR. (CVE-2018-7273)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-7273");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2018-7273");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:U/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-7273");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2018/02/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2025/03/04");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lts-xenial");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bpftool");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-abi-stablelists");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-abi-whitelists");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-alt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-bootwrapper");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-cross-headers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-debug-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-headers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-ipaclones-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-kdump");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-kdump-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-debug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-debug-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-debug-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-trace");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-trace-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-rt-trace-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-selftests-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-tools-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-tools-libs-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:kernel-zfcpdump-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:perf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-perf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-perf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bpftool");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-abi-stablelists");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-abi-whitelists");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-alt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-bootwrapper");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-cross-headers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-headers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-ipaclones-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-kdump");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-kdump-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-trace");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-trace-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-rt-trace-kvm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-selftests-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:perf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-perf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-perf");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("set_linux_os_id.nasl", "ssh_get_info2.nasl");
script_require_keys("Host/OS/identifier", "Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched");
script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Ubuntu Linux-14.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Ubuntu Linux-14.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14.04",
"pkgs": [
{"reference": "linux-aws"},
{"reference": "linux-cloud-tools-3.13.0"},
{"reference": "linux-cloud-tools-common"},
{"reference": "linux-doc"},
{"reference": "linux-headers-3.13.0"},
{"reference": "linux-image-3.13.0"},
{"reference": "linux-image-extra-3.13.0"},
{"reference": "linux-libc-dev"},
{"reference": "linux-lts-xenial"},
{"reference": "linux-source-3.13.0"},
{"reference": "linux-tools-3.13.0"},
{"reference": "linux-tools-common"},
{"reference": "linux-udebs-generic"},
{"reference": "linux-udebs-generic-lpae"},
{"reference": "linux-udebs-lowlatency"}
]
}
]
},
"CentOS Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "bpftool"},
{"reference": "kernel"},
{"reference": "kernel-abi-whitelists"},
{"reference": "kernel-alt"},
{"reference": "kernel-bootwrapper"},
{"reference": "kernel-debug"},
{"reference": "kernel-debug-devel"},
{"reference": "kernel-devel"},
{"reference": "kernel-doc"},
{"reference": "kernel-headers"},
{"reference": "kernel-kdump"},
{"reference": "kernel-kdump-devel"},
{"reference": "kernel-rt"},
{"reference": "kernel-rt-debug"},
{"reference": "kernel-rt-debug-devel"},
{"reference": "kernel-rt-debug-kvm"},
{"reference": "kernel-rt-devel"},
{"reference": "kernel-rt-doc"},
{"reference": "kernel-rt-kvm"},
{"reference": "kernel-rt-trace"},
{"reference": "kernel-rt-trace-devel"},
{"reference": "kernel-rt-trace-kvm"},
{"reference": "kernel-tools"},
{"reference": "kernel-tools-libs"},
{"reference": "kernel-tools-libs-devel"},
{"reference": "perf"},
{"reference": "python-perf"}
]
}
]
},
"Red Hat Enterprise Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "bpftool"},
{"reference": "kernel"},
{"reference": "kernel-abi-whitelists"},
{"reference": "kernel-alt"},
{"reference": "kernel-bootwrapper"},
{"reference": "kernel-debug"},
{"reference": "kernel-debug-devel"},
{"reference": "kernel-devel"},
{"reference": "kernel-doc"},
{"reference": "kernel-headers"},
{"reference": "kernel-kdump"},
{"reference": "kernel-kdump-devel"},
{"reference": "kernel-rt"},
{"reference": "kernel-rt-debug"},
{"reference": "kernel-rt-debug-devel"},
{"reference": "kernel-rt-debug-kvm"},
{"reference": "kernel-rt-devel"},
{"reference": "kernel-rt-doc"},
{"reference": "kernel-rt-kvm"},
{"reference": "kernel-rt-trace"},
{"reference": "kernel-rt-trace-devel"},
{"reference": "kernel-rt-trace-kvm"},
{"reference": "kernel-tools"},
{"reference": "kernel-tools-libs"},
{"reference": "kernel-tools-libs-devel"},
{"reference": "perf"},
{"reference": "python-perf"}
]
}
]
},
"CentOS Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "bpftool"},
{"reference": "kernel"},
{"reference": "kernel-abi-stablelists"},
{"reference": "kernel-abi-whitelists"},
{"reference": "kernel-core"},
{"reference": "kernel-cross-headers"},
{"reference": "kernel-debug"},
{"reference": "kernel-debug-core"},
{"reference": "kernel-debug-devel"},
{"reference": "kernel-debug-modules"},
{"reference": "kernel-debug-modules-extra"},
{"reference": "kernel-debug-modules-internal"},
{"reference": "kernel-devel"},
{"reference": "kernel-doc"},
{"reference": "kernel-headers"},
{"reference": "kernel-ipaclones-internal"},
{"reference": "kernel-modules"},
{"reference": "kernel-modules-extra"},
{"reference": "kernel-modules-internal"},
{"reference": "kernel-selftests-internal"},
{"reference": "kernel-tools"},
{"reference": "kernel-tools-libs"},
{"reference": "kernel-tools-libs-devel"},
{"reference": "kernel-zfcpdump"},
{"reference": "kernel-zfcpdump-core"},
{"reference": "kernel-zfcpdump-devel"},
{"reference": "kernel-zfcpdump-modules"},
{"reference": "kernel-zfcpdump-modules-extra"},
{"reference": "kernel-zfcpdump-modules-internal"},
{"reference": "perf"},
{"reference": "python3-perf"}
]
}
]
},
"Red Hat Enterprise Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "bpftool"},
{"reference": "kernel"},
{"reference": "kernel-abi-stablelists"},
{"reference": "kernel-abi-whitelists"},
{"reference": "kernel-core"},
{"reference": "kernel-cross-headers"},
{"reference": "kernel-debug"},
{"reference": "kernel-debug-core"},
{"reference": "kernel-debug-devel"},
{"reference": "kernel-debug-modules"},
{"reference": "kernel-debug-modules-extra"},
{"reference": "kernel-debug-modules-internal"},
{"reference": "kernel-devel"},
{"reference": "kernel-doc"},
{"reference": "kernel-headers"},
{"reference": "kernel-ipaclones-internal"},
{"reference": "kernel-modules"},
{"reference": "kernel-modules-extra"},
{"reference": "kernel-modules-internal"},
{"reference": "kernel-selftests-internal"},
{"reference": "kernel-tools"},
{"reference": "kernel-tools-libs"},
{"reference": "kernel-tools-libs-devel"},
{"reference": "kernel-zfcpdump"},
{"reference": "kernel-zfcpdump-core"},
{"reference": "kernel-zfcpdump-devel"},
{"reference": "kernel-zfcpdump-modules"},
{"reference": "kernel-zfcpdump-modules-extra"},
{"reference": "kernel-zfcpdump-modules-internal"},
{"reference": "perf"},
{"reference": "python3-perf"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation