6.8 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.4%
The remote host is missing a security patch.
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/h:f5:big-ip";
if (description)
{
script_oid("1.3.6.1.4.1.25623.1.0.105481");
script_cve_id("CVE-2015-7613");
script_tag(name:"cvss_base", value:"6.9");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:C/I:C/A:C");
script_version("2023-08-09T05:05:14+0000");
script_name("F5 BIG-IP - Linux kernel vulnerability CVE-2015-7613");
script_xref(name:"URL", value:"https://my.f5.com/manage/s/article/K90230486");
script_tag(name:"impact", value:"Exploitation of this issue requires shell access, and a non-standard and unsupported configuration (such as modifications to Linux configuration files) may expose this issue further. F5 does not recommend manually editing Linux configuration files. There is no remote access vector or data plane exposure.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.");
script_tag(name:"solution", value:"See the referenced vendor advisory for a solution.");
script_tag(name:"summary", value:"The remote host is missing a security patch.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"last_modification", value:"2023-08-09 05:05:14 +0000 (Wed, 09 Aug 2023)");
script_tag(name:"creation_date", value:"2015-12-09 17:28:24 +0100 (Wed, 09 Dec 2015)");
script_category(ACT_GATHER_INFO);
script_family("F5 Local Security Checks");
script_copyright("Copyright (C) 2015 Greenbone AG");
script_dependencies("gb_f5_big_ip_version.nasl");
script_mandatory_keys("f5/big_ip/version", "f5/big_ip/active_modules");
exit(0);
}
include("version_func.inc");
include("host_details.inc");
include("list_array_func.inc");
include("f5.inc");
if (!version = get_app_version(cpe: CPE))
exit(0);
check_f5["LTM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["AAM"] = make_array("affected", "12.0.0;11.4.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["AFM"] = make_array("affected", "12.0.0;11.3.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["AVR"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;");
check_f5["APM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["ASM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["GTM"] = make_array("affected", "11.1.0-11.6.1;",
"unaffected", "11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["LC"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["PEM"] = make_array("affected", "12.0.0;11.3.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["PSM"] = make_array("affected", "11.1.0-11.4.1;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
check_f5["WAM"] = make_array("affected", "11.1.0-11.3.0;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
check_f5["WOM"] = make_array("affected", "11.1.0-11.3.0;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
if (report = f5_is_vulnerable(ca: check_f5, version: version)) {
security_message(port: 0, data: report);
exit(0);
}
exit(99);