Lucene search

K
openvas
Copyright (C) 2020 Greenbone Networks GmbHOPENVAS:1361412562310852829
HistoryJan 09, 2020 - 12:00 a.m.

openSUSE: Security Advisory for tcpdump (openSUSE-SU-2019:2348-1)

2020-01-0900:00:00
Copyright (C) 2020 Greenbone Networks GmbH
plugins.openvas.org
8

The remote host is missing an update for the

# Copyright (C) 2020 Greenbone Networks GmbH
# Text descriptions are largely excerpted from the referenced
# advisory, and are Copyright (C) the respective author(s)
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.852829");
  script_version("2020-01-31T08:04:39+0000");
  script_cve_id("CVE-2017-16808", "CVE-2018-10103", "CVE-2018-10105", "CVE-2018-14461",
                "CVE-2018-14462", "CVE-2018-14463", "CVE-2018-14464", "CVE-2018-14465",
                "CVE-2018-14466", "CVE-2018-14467", "CVE-2018-14468", "CVE-2018-14469",
                "CVE-2018-14470", "CVE-2018-14879", "CVE-2018-14880", "CVE-2018-14881",
                "CVE-2018-14882", "CVE-2018-16227", "CVE-2018-16228", "CVE-2018-16229",
                "CVE-2018-16230", "CVE-2018-16300", "CVE-2018-16301", "CVE-2018-16451",
                 "CVE-2018-16452", "CVE-2019-1010220", "CVE-2019-15166", "CVE-2019-15167");
  script_tag(name:"cvss_base", value:"7.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_tag(name:"last_modification", value:"2020-01-31 08:04:39 +0000 (Fri, 31 Jan 2020)");
  script_tag(name:"creation_date", value:"2020-01-09 09:33:43 +0000 (Thu, 09 Jan 2020)");
  script_name("openSUSE: Security Advisory for tcpdump (openSUSE-SU-2019:2348-1)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2020 Greenbone Networks GmbH");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=openSUSELeap15\.1");

  script_xref(name:"openSUSE-SU", value:"2019:2348-1");
  script_xref(name:"URL", value:"https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'tcpdump'
  package(s) announced via the openSUSE-SU-2019:2348-1 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"This update for tcpdump fixes the following issues:

  - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print
  and lookup_emem (bsc#1068716 bsc#1153098).

  - CVE-2018-10103: Fixed a mishandling of the printing of SMB data
  (bsc#1153098).

  - CVE-2018-10105: Fixed a mishandling of the printing of SMB data
  (bsc#1153098).

  - CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print
  (bsc#1153098).

  - CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print
  (bsc#1153098).

  - CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print
  (bsc#1153098).

  - CVE-2018-14464: Fixed a buffer over-read in
  print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).

  - CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print
  (bsc#1153098).

  - CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find
  (bsc#1153098).

  - CVE-2018-14467: Fixed a buffer over-read in
  print-bgp.c:bgp_capabilities_print (bsc#1153098).

  - CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print
  (bsc#1153098).

  - CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print
  (bsc#1153098).

  - CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2
  (bsc#1153098).

  - CVE-2018-14879: Fixed a buffer overflow in the command-line argument
  parser (bsc#1153098).

  - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser
  (bsc#1153098).

  - CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).

  - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser
  (bsc#1153098).

  - CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in
  print-802_11.c for the Mesh Flags subfield (bsc#1153098).

  - CVE-2018-16228: Fixed a buffer over-read in the HNCP parser
  (bsc#1153098).

  - CVE-2018-16229: Fixed a buffer over-read in the DCCP parser
  (bsc#1153098).

  - CVE-2018-16230: Fixed a buffer over-read in the BGP parser in
  print-bgp.c:bgp_attr_print (bsc#1153098).

  - CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that
  allowed denial-of-service by stack consumption (bsc#1153098).

  - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).

  - CVE-2018-16451: Fixed several buffer over-reads in
  print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN
  (bsc#1153098).

  - CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata
  (bsc#1153098).

  - CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs
  (bsc#1153098).

  - CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).

  This update was importe ...

  Description truncated. Please see the references for more information.");

  script_tag(name:"affected", value:"'tcpdump' package(s) on openSUSE Leap 15.1.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "openSUSELeap15.1") {

  if(!isnull(res = isrpmvuln(pkg:"tcpdump", rpm:"tcpdump~4.9.2~lp151.4.6.1", rls:"openSUSELeap15.1"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"tcpdump-debuginfo", rpm:"tcpdump-debuginfo~4.9.2~lp151.4.6.1", rls:"openSUSELeap15.1"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"tcpdump-debugsource", rpm:"tcpdump-debugsource~4.9.2~lp151.4.6.1", rls:"openSUSELeap15.1"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);
How to find holes in your network?

Try incredible fast Vulners Perimeter Scanner and find vulnerabilities and unnecessary ip and ports in network devices inside your network before anyone else.

Try Network Scanner
Related for OPENVAS:1361412562310852829