Tenable Nessus < 8.15.3, 10.x < 10.1.1 Multiple Vulnerabilities (TNS-2022-05)

# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:tenable:nessus";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.118406");
  script_version("2024-02-09T14:47:30+0000");
  script_tag(name:"last_modification", value:"2024-02-09 14:47:30 +0000 (Fri, 09 Feb 2024)");
  script_tag(name:"creation_date", value:"2022-11-07 12:54:42 +0000 (Mon, 07 Nov 2022)");
  script_tag(name:"cvss_base", value:"9.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:C/I:C/A:C");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2022-02-14 12:15:00 +0000 (Mon, 14 Feb 2022)");

  script_cve_id("CVE-2022-22827", "CVE-2022-22826", "CVE-2022-22825", "CVE-2022-22824",
                "CVE-2022-22823", "CVE-2022-22822", "CVE-2021-46143", "CVE-2021-45960",
                "CVE-2022-23852", "CVE-2022-23990");

  script_tag(name:"qod_type", value:"remote_banner");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("Tenable Nessus < 8.15.3, 10.x < 10.1.1 Multiple Vulnerabilities (TNS-2022-05)");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2022 Greenbone AG");
  script_family("General");
  script_dependencies("gb_tenable_nessus_consolidation.nasl");
  script_mandatory_keys("tenable/nessus/detected");

  script_tag(name:"summary", value:"Tenable Nessus is prone to multiple vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Tenable Nessus leverages third-party software to help provide underlying
  functionality. One of the third-party components (Expat) was found to contain vulnerabilities, and
  an updated version has been made available by the provider. Nessus 10.1.1 and Nessus 8.15.3 update
  Expat to version 2.4.4 to address the identified vulnerability.

  These vulnerabilities exist in the 3rd party component:

  - CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826,
    CVE-2022-22827, CVE-2021-46143, CVE-2022-23852, CVE-2022-23990: Integer overflow

  - CVE-2021-45960: Incorrect Calculation");

  script_tag(name:"affected", value:"Tenable Nessus prior to versions 8.15.3 and 10.1.1.");

  script_tag(name:"solution", value:"Update to version 8.15.3, 10.1.1 or later.");

  script_xref(name:"URL", value:"https://www.tenable.com/security/tns-2022-05");

  exit(0);
}

include("version_func.inc");
include("host_details.inc");

if (isnull(port = get_app_port(cpe: CPE)))
  exit(0);

if (!infos = get_app_version_and_location(cpe: CPE, port: port, exit_no_version: TRUE))
  exit(0);

version = infos["version"];
location = infos["location"];

if (version_is_less(version: version, test_version: "8.15.3")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "8.15.3", install_path: location);
  security_message(port: port, data: report);
  exit(0);
}

if (version =~ "^10\." && version_is_less(version: version, test_version: "10.1.1")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "10.1.1", install_path: location);
  security_message(port: port, data: report);
  exit(0);
}

exit(99);