Linux Distros Unpatched Vulnerability : CVE-2022-39348

##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(225019);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/01");

  script_cve_id("CVE-2022-39348");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2022-39348");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host
    header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource`
    resource which renders the Host header unescaped into the 404 response allowing HTML and script injection.
    In practice this should be very difficult to exploit as being able to modify the Host header of a normal
    HTTP request implies that one is already in a privileged position. This issue was fixed in version
    22.10.0rc1. There are no known workarounds. (CVE-2022-39348)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2022-39348");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-39348");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2022-39348");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/10/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/03/05");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:twisted");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("set_linux_os_id.nasl", "ssh_get_info2.nasl");
  script_require_keys("Host/OS/identifier", "Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched");
  script_require_ports("Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "python-twisted"},
          {"reference": "python-twisted-bin"},
          {"reference": "python-twisted-bin-dbg"},
          {"reference": "python-twisted-conch"},
          {"reference": "python-twisted-core"},
          {"reference": "python-twisted-lore"},
          {"reference": "python-twisted-mail"},
          {"reference": "python-twisted-names"},
          {"reference": "python-twisted-news"},
          {"reference": "python-twisted-runner"},
          {"reference": "python-twisted-runner-dbg"},
          {"reference": "python-twisted-web"},
          {"reference": "python-twisted-words"},
          {"reference": "twisted-doc"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "python-twisted"},
          {"reference": "python-twisted-bin"},
          {"reference": "python-twisted-bin-dbg"},
          {"reference": "python-twisted-conch"},
          {"reference": "python-twisted-core"},
          {"reference": "python-twisted-mail"},
          {"reference": "python-twisted-names"},
          {"reference": "python-twisted-news"},
          {"reference": "python-twisted-runner"},
          {"reference": "python-twisted-runner-dbg"},
          {"reference": "python-twisted-web"},
          {"reference": "python-twisted-words"},
          {"reference": "python3-twisted"},
          {"reference": "twisted-doc"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "python-twisted"},
          {"reference": "python-twisted-bin"},
          {"reference": "python-twisted-bin-dbg"},
          {"reference": "python-twisted-conch"},
          {"reference": "python-twisted-core"},
          {"reference": "python-twisted-mail"},
          {"reference": "python-twisted-names"},
          {"reference": "python-twisted-news"},
          {"reference": "python-twisted-runner"},
          {"reference": "python-twisted-runner-dbg"},
          {"reference": "python-twisted-web"},
          {"reference": "python-twisted-words"},
          {"reference": "python3-twisted"},
          {"reference": "python3-twisted-bin"},
          {"reference": "python3-twisted-bin-dbg"},
          {"reference": "twisted-doc"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}