Lucene search

K
openvasCopyright (C) 2009 E-Soft Inc.OPENVAS:136141256231065695
HistoryOct 11, 2009 - 12:00 a.m.

SLES11: Security update for Linux kernel

2009-10-1100:00:00
Copyright (C) 2009 E-Soft Inc.
plugins.openvas.org
15

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.104 Low

EPSS

Percentile

94.9%

The remote host is missing updates to packages that affect
the security of your system. One or more of the following packages are affected:

ext4dev-kmp-default

ext4dev-kmp-pae

ext4dev-kmp-vmi

ext4dev-kmp-xen

kernel-default

kernel-default-base

kernel-pae

kernel-pae-base

kernel-source

kernel-syms

kernel-vmi

kernel-vmi-base

kernel-xen

kernel-xen-base

More details may also be found by searching for the SuSE
Enterprise Server 11 patch database linked in the references.

# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=499152");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=495091");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=439775");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=493214");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=516213");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=476525");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=516827");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=509544");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=514644");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=503855");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=509071");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=475149");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=495065");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=498369");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=450658");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=503635");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=497648");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=511243");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=509822");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=507557");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=506361");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=481074");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=484716");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=500429");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=487247");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=478462");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=501396");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=476822");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=485768");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=502903");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=497341");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=498358");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=499845");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=491802");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=505578");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=191648");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=185164");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=501651");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=502675");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=499278");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=503353");
  script_xref(name:"URL", value:"https://bugzilla.novell.com/show_bug.cgi?id=395775");
  script_oid("1.3.6.1.4.1.25623.1.0.65695");
  script_version("2024-02-16T05:06:55+0000");
  script_tag(name:"last_modification", value:"2024-02-16 05:06:55 +0000 (Fri, 16 Feb 2024)");
  script_tag(name:"creation_date", value:"2009-10-11 22:58:51 +0200 (Sun, 11 Oct 2009)");
  script_cve_id("CVE-2009-1961", "CVE-2009-1389", "CVE-2009-1385", "CVE-2009-1630");
  script_tag(name:"cvss_base", value:"7.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-02-15 20:41:50 +0000 (Thu, 15 Feb 2024)");
  script_name("SLES11: Security update for Linux kernel");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2009 E-Soft Inc.");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse_sles", "ssh/login/rpms", re:"ssh/login/release=SLES11\.0");
  script_tag(name:"solution", value:"Please install the updates provided by SuSE.");
  script_tag(name:"summary", value:"The remote host is missing updates to packages that affect
the security of your system.  One or more of the following packages are affected:

    ext4dev-kmp-default

    ext4dev-kmp-pae

    ext4dev-kmp-vmi

    ext4dev-kmp-xen

    kernel-default

    kernel-default-base

    kernel-pae

    kernel-pae-base

    kernel-source

    kernel-syms

    kernel-vmi

    kernel-vmi-base

    kernel-xen

    kernel-xen-base

More details may also be found by searching for the SuSE
Enterprise Server 11 patch database linked in the references.");

  script_xref(name:"URL", value:"http://download.novell.com/patch/finder/");

  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

res = "";
report = "";
if ((res = isrpmvuln(pkg:"ext4dev-kmp-default", rpm:"ext4dev-kmp-default~0_2.6.27.25_0.1~7.1.12", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"ext4dev-kmp-pae", rpm:"ext4dev-kmp-pae~0_2.6.27.25_0.1~7.1.12", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"ext4dev-kmp-vmi", rpm:"ext4dev-kmp-vmi~0_2.6.27.25_0.1~7.1.12", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"ext4dev-kmp-xen", rpm:"ext4dev-kmp-xen~0_2.6.27.25_0.1~7.1.12", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-default", rpm:"kernel-default~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-default-base", rpm:"kernel-default-base~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-pae", rpm:"kernel-pae~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-pae-base", rpm:"kernel-pae-base~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-source", rpm:"kernel-source~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-syms", rpm:"kernel-syms~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-vmi", rpm:"kernel-vmi~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-vmi-base", rpm:"kernel-vmi-base~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-xen", rpm:"kernel-xen~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}
if ((res = isrpmvuln(pkg:"kernel-xen-base", rpm:"kernel-xen-base~2.6.27.25~0.1.1", rls:"SLES11.0")) != NULL) {
    report += res;
}

if (report != "") {
    security_message(data:report);
} else if (__pkg_match) {
    exit(99);
}

References

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.104 Low

EPSS

Percentile

94.9%