An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties consider this user error, not a vulnerability, because the permissions are under the control of the user before any sensitive information is present in the file

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-     config feature, the init script creates an empty config file with world-readable default permissions,     leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties     consider this user error, not a vulnerability, because the permissions are under the control of the user     before any sensitive information is present in the file (CVE-2020-12831)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:4619 advisory.

  - ** DISPUTED ** An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using     the split-config feature, the init script creates an empty config file with world-readable default     permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some     parties consider this user error, not a vulnerability, because the permissions are under the control of     the user before any sensitive information is present in the file. (CVE-2020-12831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has frr packages installed that are affected by a vulnerability:

  - ** DISPUTED ** An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using     the split-config feature, the init script creates an empty config file with world-readable default     permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some     parties consider this user error, not a vulnerability, because the permissions are under the control of     the user before any sensitive information is present in the file. (CVE-2020-12831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4619 advisory.

  - frr: default permission issue eases information leaks (CVE-2020-12831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4619 advisory.

    [7.0-10]
    - Resolves: #1867793 - FRR does not conform to the source port range specified in RFC5881

    [7.0-9]
    - Resolves: #1852476 - default permission issue eases information leaks

    [7.0-8]
    - Resolves: #1819319 - frr fails to start start if the initscripts package is missing

    [7.0-7]
    - Resolves: #1758544 - IGMPv3 queries may lead to DoS

    [7.0-6]
    - Resolves: #1776342 - frr has missing dependency on iproute

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4619 advisory.

    FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3,     ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

    Security Fix(es):

    * frr: default permission issue eases information leaks (CVE-2020-12831)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256584	Linux Distros Unpatched Vulnerability : CVE-2020-12831	Nessus	Misc.	medium
157594	AlmaLinux 8 : frr (ALSA-2020:4619)	Nessus	Alma Linux Local Security Checks	medium
147307	NewStart CGSL MAIN 6.02 : frr Vulnerability (NS-SA-2021-0084)	Nessus	NewStart CGSL Local Security Checks	medium
145922	CentOS 8 : frr (CESA-2020:4619)	Nessus	CentOS Local Security Checks	medium
142782	Oracle Linux 8 : frr (ELSA-2020-4619)	Nessus	Oracle Linux Local Security Checks	medium
142398	RHEL 8 : frr (RHSA-2020:4619)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2020-12831

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium