Lucene search
Copyright (C) 2021 Greenbone AGOPENVAS:13614125623114202128481HistoryAug 26, 2021 - 12:00 a.m.
SUSE: Security Advisory (SUSE-SU-2021:2848-1)
2021-08-2600:00:00
Copyright (C) 2021 Greenbone AG
plugins.openvas.org
10
suse-su-2021:2848-1
aspell
heap-buffer-overflow
cve-2019-25051
suse linux enterprise server
sap
software development kit
openstack cloud
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
30.7%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2021 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.4.2021.2848.1");
script_cve_id("CVE-2019-25051");
script_tag(name:"creation_date", value:"2021-08-26 02:26:42 +0000 (Thu, 26 Aug 2021)");
script_version("2024-02-02T14:37:50+0000");
script_tag(name:"last_modification", value:"2024-02-02 14:37:50 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"4.6");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:P/I:P/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2021-07-28 19:35:40 +0000 (Wed, 28 Jul 2021)");
script_name("SUSE: Security Advisory (SUSE-SU-2021:2848-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2021 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse_sles", "ssh/login/rpms", re:"ssh/login/release=(SLES12\.0SP2|SLES12\.0SP3|SLES12\.0SP4|SLES12\.0SP5)");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2021:2848-1");
script_xref(name:"URL", value:"https://www.suse.com/support/update/announcement/2021/suse-su-20212848-1/");
script_tag(name:"summary", value:"The remote host is missing an update for the 'aspell' package(s) announced via the SUSE-SU-2021:2848-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for aspell fixes the following issues:
CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:dup_top
(bsc#1188576).");
script_tag(name:"affected", value:"'aspell' package(s) on SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "SLES12.0SP2") {
if(!isnull(res = isrpmvuln(pkg:"aspell", rpm:"aspell~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debuginfo", rpm:"aspell-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debugsource", rpm:"aspell-debugsource~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-ispell", rpm:"aspell-ispell~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15", rpm:"libaspell15~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-32bit", rpm:"libaspell15-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo", rpm:"libaspell15-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo-32bit", rpm:"libaspell15-debuginfo-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP2"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "SLES12.0SP3") {
if(!isnull(res = isrpmvuln(pkg:"aspell", rpm:"aspell~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debuginfo", rpm:"aspell-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debugsource", rpm:"aspell-debugsource~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-ispell", rpm:"aspell-ispell~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15", rpm:"libaspell15~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-32bit", rpm:"libaspell15-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo", rpm:"libaspell15-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo-32bit", rpm:"libaspell15-debuginfo-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP3"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "SLES12.0SP4") {
if(!isnull(res = isrpmvuln(pkg:"aspell", rpm:"aspell~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debuginfo", rpm:"aspell-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debugsource", rpm:"aspell-debugsource~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-ispell", rpm:"aspell-ispell~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15", rpm:"libaspell15~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-32bit", rpm:"libaspell15-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo", rpm:"libaspell15-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo-32bit", rpm:"libaspell15-debuginfo-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "SLES12.0SP5") {
if(!isnull(res = isrpmvuln(pkg:"aspell", rpm:"aspell~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debuginfo", rpm:"aspell-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-debugsource", rpm:"aspell-debugsource~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"aspell-ispell", rpm:"aspell-ispell~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15", rpm:"libaspell15~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-32bit", rpm:"libaspell15-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo", rpm:"libaspell15-debuginfo~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libaspell15-debuginfo-32bit", rpm:"libaspell15-debuginfo-32bit~0.60.6.1~18.11.1", rls:"SLES12.0SP5"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
nessus
nessus
Amazon Linux 2 : aspell (ALAS-2023-2199)
2023-08-14 00:00:00
Oracle Linux 8 : aspell (ELSA-2022-1808)
2022-05-18 00:00:00
openSUSE 15 Security Update : aspell (openSUSE-SU-2021:2794-1)
2021-08-21 00:00:00
openvas
openvas
Fedora: Security Advisory for aspell (FEDORA-2021-69de7c7ca4)
2021-07-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14783-1)
2021-08-13 00:00:00
openSUSE: Security Advisory for aspell (openSUSE-SU-2021:1181-1)
2021-08-24 00:00:00
osv
osv
aspell vulnerability
2021-07-26 15:05:48
Moderate: aspell security update
2022-05-10 08:02:17
Moderate: aspell security update
2022-05-10 08:02:17
redhatcve
redhatcve
CVE-2019-25051
2021-07-20 14:50:16
gentoo
gentoo
GNU Aspell: Heap Buffer Overflow
2024-02-26 00:00:00
alpinelinux
alpinelinux
CVE-2019-25051
2021-07-20 07:15:07
fedora
fedora
[SECURITY] Fedora 34 Update: aspell-0.60.8-7.fc34
2021-07-29 01:09:13
cvelist
cvelist
CVE-2019-25051
2021-07-20 06:46:25
almalinux
almalinux
Moderate: aspell security update
2022-05-10 08:02:17
suse
suse
Security update for aspell (important)
2021-08-20 00:00:00
Security update for aspell (important)
2021-08-23 00:00:00
prion
prion
Heap overflow
2021-07-20 07:15:00
cbl_mariner
cbl_mariner
CVE-2019-25051 affecting package aspell for versions less than 0.60.8-7
2022-11-03 20:37:45
CVE-2019-25051 affecting package aspell 0.60.8-5
2024-10-01 22:11:53
redhat
redhat
(RHSA-2022:1808) Moderate: aspell security update
2022-05-10 08:02:17
amazon
amazon
Medium: aspell
2023-08-03 18:10:00
rocky
rocky
aspell security update
2022-05-10 08:02:17
rosalinux
rosalinux
Advisory ROSA-SA-2024-2425
2024-05-28 08:24:10
mageia
mageia
Updated aspell packages fix security vulnerability
2021-07-28 23:00:51
cve
cve
CVE-2019-25051
2021-07-20 07:15:07
ubuntu
ubuntu
Aspell vulnerability
2021-07-26 00:00:00
oraclelinux
oraclelinux
aspell security update
2022-05-17 00:00:00
ubuntucve
ubuntucve
CVE-2019-25051
2021-07-20 00:00:00
nvd
nvd
CVE-2019-25051
2021-07-20 07:15:07
debiancve
debiancve
CVE-2019-25051
2021-07-20 07:15:07
debian
debian
[SECURITY] [DLA 2720-1] aspell security update
2021-07-25 22:04:19
[SECURITY] [DSA 4948-1] aspell security update
2021-08-01 18:39:19
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
30.7%
Related for OPENVAS:13614125623114202128481