An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2020:14454-1 advisory.

  - An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on     resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'. (CVE-2019-0804)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2019:1527 advisory.

  - WALinuxAgent: swapfile created with weak permissions (CVE-2019-0804)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the WALinuxAgent package has been released.

This update for python-azure-agent fixes the following issues :

python-azure-agent was updated to version 2.2.45 (jsc#ECO-80)

  + Add support for Gen2 VM resource disks

  + Use alternate systemd detection

  + Fix /proc/net/route requirement that causes errors on     FreeBSD

  + Add cloud-init auto-detect to prevent multiple     provisioning mechanisms from relying on configuration     for coordination

  + Disable cgroups when daemon is setup incorrectly

  + Remove upgrade extension loop for the same goal state

  + Add container id for extension telemetry events

  + Be more exact when detecting IMDS service health

  + Changing add_event to start sending missing fields

From 2.2.44 update :

  + Remove outdated extension ZIP packages

  + Improved error handling when starting extensions using     systemd

  + Reduce provisioning time of some custom images

  + Improve the handling of extension download errors

  + New API for extension authors to handle errors during     extension update

  + Fix handling of errors in calls to openssl

  + Improve logic to determine current distro

  + Reduce verbosity of several logging statements

From 2.2.42 update :

  + Poll for artifact blob, addresses goal state procesing     issue

From 2.2.41 update :

  + Rewriting the mechanism to start the extension using     systemd-run for systems using systemd for managing

  + Refactoring of resource monitoring framework using     cgroup for both systemd and non-systemd approaches     [#1530, #1534]

  + Telemetry pipeline for resource monitoring data

From 2.2.40 update :

  + Fixed tracking of memory/cpu usage

  + Do not prevent extensions from running if setting up     cgroups fails

  + Enable systemd-aware deprovisioning on all versions >=     18.04

  + Add systemd support for Debian Jessie, Stretch, and     Buster

  + Support for Linux Openwrt

From 2.2.38 update :

Security issue fixed :

  + CVE-2019-0804: An issue with swapfile handling in the     agent creates a data leak situation that exposes system     memory data. (bsc#1127838)

  + Add fixes for handling swap file and other nit fixes

From 2.2.37 update :

  + Improves re-try logic to handle errors while downloading     extensions

This update was imported from the SUSE:SLE-15-SP1:Update update project.

From Red Hat Security Advisory 2019:1527 :

An update for WALinuxAgent is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Windows Azure Linux Agent supports provisioning and running Linux virtual machines in the Microsoft Windows Azure cloud.

Security Fix(es) :

* WALinuxAgent: swapfile created with weak permissions (CVE-2019-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1527 advisory.

  - WALinuxAgent: swapfile created with weak permissions (CVE-2019-0804)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2019-0804

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python-azure-agent fixes the following issues :

  - CVE-2019-0804: An issue with swapfile handling in the     agent created a data leak situation that exposes system     memory data. (bsc#1127838)

This update was imported from the SUSE:SLE-15:Update update project.

Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure.

For Debian 8 'Jessie', this problem has been fixed in version 2.2.18-3~deb8u2.

We recommend that you upgrade your waagent packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that WALinuxAgent created swap files with incorrect permissions. A local attacker could possibly use this issue to obtain sensitive information from the swap file.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure.

ID	Name	Product	Family	Severity
150663	SUSE SLES11 Security Update : python-azure-agent (SUSE-SU-2020:14454-1)	Nessus	SuSE Local Security Checks	medium
145601	CentOS 8 : WALinuxAgent (CESA-2019:1527)	Nessus	CentOS Local Security Checks	medium
139611	Photon OS 2.0: Walinuxagent PHSA-2020-2.0-0271	Nessus	PhotonOS Local Security Checks	medium
136696	Photon OS 3.0: Walinuxagent PHSA-2020-3.0-0090	Nessus	PhotonOS Local Security Checks	medium
134193	openSUSE Security Update : python-azure-agent (openSUSE-2020-261)	Nessus	SuSE Local Security Checks	medium
127593	Oracle Linux 8 : WALinuxAgent (ELSA-2019-1527)	Nessus	Oracle Linux Local Security Checks	medium
126029	RHEL 8 : WALinuxAgent (RHSA-2019:1527)	Nessus	Red Hat Local Security Checks	medium
124522	Fedora 30 : WALinuxAgent (2019-9effd63191)	Nessus	Fedora Local Security Checks	medium
123653	openSUSE Security Update : python-azure-agent (openSUSE-2019-1106)	Nessus	SuSE Local Security Checks	medium
122824	Debian DLA-1709-1 : waagent security update	Nessus	Debian Local Security Checks	medium
122812	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : WALinuxAgent vulnerability (USN-3907-1)	Nessus	Ubuntu Local Security Checks	medium
122793	Debian DSA-4406-1 : waagent - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2019-0804

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium