A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4404 advisory.

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kexec-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kexec-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4404 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4404 advisory.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4404 advisory.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195333	RHEL 6 : kexec-tools (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
184765	Rocky Linux 8 : kexec-tools (RLSA-2021:4404)	Nessus	Rocky Linux Local Security Checks	medium
169403	EulerOS Virtualization 2.10.0 : kexec-tools (EulerOS-SA-2022-2907)	Nessus	Huawei Local Security Checks	medium
169366	EulerOS Virtualization 2.10.1 : kexec-tools (EulerOS-SA-2022-2933)	Nessus	Huawei Local Security Checks	medium
166855	EulerOS 2.0 SP10 : kexec-tools (EulerOS-SA-2022-2655)	Nessus	Huawei Local Security Checks	medium
166835	EulerOS 2.0 SP10 : kexec-tools (EulerOS-SA-2022-2687)	Nessus	Huawei Local Security Checks	medium
157508	AlmaLinux 8 : kexec-tools (ALSA-2021:4404)	Nessus	Alma Linux Local Security Checks	medium
155420	Oracle Linux 8 : kexec-tools (ELSA-2021-4404)	Nessus	Oracle Linux Local Security Checks	medium
155180	CentOS 8 : kexec-tools (CESA-2021:4404)	Nessus	CentOS Local Security Checks	medium
155179	RHEL 8 : kexec-tools (RHSA-2021:4404)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-20269

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium