The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to     use configurations from environment variables, which allows local users to gain privileges via the (1)     HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
    (CVE-2016-10151)

  - The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the '.athena.mit.edu' default     domain when opening the configuration file fails, which allows remote attackers to gain root privileges by     poisoning the DNS cache. (CVE-2016-10152)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2016-10152 (hard-coded DNS fallback) Fix CVE-2016-10151 (weak SUID check) Move package to autosetup Resolves: #1332509 Resolves:
#1332494

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201805-01 (hesiod: Root privilege escalation)

    Multiple vulnerabilities have been discovered in hesiod that have       remained unaddressed. Please review the referenced CVE identifiers for       details.
  Impact :

    A remote or local attacker may be able to escalate privileges to root.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
219477	Linux Distros Unpatched Vulnerability : CVE-2016-10151	Nessus	Misc.	high
161579	EulerOS 2.0 SP3 : hesiod (EulerOS-SA-2022-1729)	Nessus	Huawei Local Security Checks	critical
159095	EulerOS 2.0 SP5 : hesiod (EulerOS-SA-2022-1325)	Nessus	Huawei Local Security Checks	critical
120548	Fedora 29 : hesiod (2018-792ff3cafa)	Nessus	Fedora Local Security Checks	critical
120313	Fedora 28 : hesiod (2018-2b274689e8)	Nessus	Fedora Local Security Checks	critical
118334	Fedora 27 : hesiod (2018-25c6d1b417)	Nessus	Fedora Local Security Checks	critical
109533	GLSA-201805-01 : hesiod: Root privilege escalation	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-10151

high

Tenable Plugins

high

critical

critical

critical

critical

critical

critical