is_closing_session() allows users to create arbitrary tcp dbus connections

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - is_closing_session() allows users to create arbitrary tcp dbus connections (CVE-2022-28655)

  - is_closing_session() allows users to create arbitrary tcp dbus connections. (CVE-2022-28655)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6894-1 advisory.

    Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced     after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user.
    (CVE-2021-3899)

    Gerrit Venema discovered that Apport incorrectly handled connections to Apport sockets inside containers.
    A local attacker could possibly use this issue to connect to arbitrary sockets as the root user.
    (CVE-2022-1242)

    Gerrit Venema discovered that Apport incorrectly handled user settings files. A local attacker could     possibly use this issue to cause Apport to consume resources, leading to a denial of service.
    (CVE-2022-28652)

    Gerrit Venema discovered that Apport did not limit the amount of logging from D-Bus connections. A local     attacker could possibly use this issue to fill up the Apport log file, leading to a denial of service.
    (CVE-2022-28654)

    Gerrit Venema discovered that Apport did not filter D-Bus connection strings. A local attacker could     possibly use this issue to cause Apport to make arbitrary network connections. (CVE-2022-28655)

    Gerrit Venema discovered that Apport did not limit the amount of memory being consumed during D-Bus     connections. A local attacker could possibly use this issue to cause Apport to consume memory, leading to     a denial of service. (CVE-2022-28656)

    Gerrit Venema discovered that Apport did not disable the python crash handler before chrooting into a     container. A local attacker could possibly use this issue to execute arbitrary code. (CVE-2022-28657)

    Gerrit Venema discovered that Apport incorrectly handled filename argument whitespace. A local attacker     could possibly use this issue to spoof arguments to the Apport daemon. (CVE-2022-28658)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5427-1 advisory.

    Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced     after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user.
    (CVE-2021-3899)

    Gerrit Venema discovered that Apport incorrectly handled connections to Apport sockets inside containers.
    A local attacker could possibly use this issue to connect to arbitrary sockets as the root user.
    (CVE-2022-1242)

    Gerrit Venema discovered that Apport incorrectly handled user settings files. A local attacker could     possibly use this issue to cause Apport to consume resources, leading to a denial of service.
    (CVE-2022-28652)

    Gerrit Venema discovered that Apport did not limit the amount of logging from D-Bus connections. A local     attacker could possibly use this issue to fill up the Apport log file, leading to denial of service.
    (CVE-2022-28654)

    Gerrit Venema discovered that Apport did not filter D-Bus connection strings. A local attacker could     possibly use this issue to cause Apport to make arbitrary network connections. (CVE-2022-28655)

    Gerrit Venema discovered that Apport did not limit the amount of memory being consumed during D-Bus     connections. A local attacker could possibly use this issue to cause Apport to consume memory, leading to     a denial of service. (CVE-2022-28656)

    Gerrit Venema discovered that Apport did not disable the python crash handler before chrooting into a     container. A local attacker could possibly use this issue to execute arbitrary code. (CVE-2022-28657)

    Gerrit Venema discovered that Apport incorrectly handled filename argument whitespace. A local attacker     could possibly use this issue to spoof arguments to the Apport daemon. (CVE-2022-28658)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
262331	Linux Distros Unpatched Vulnerability : CVE-2022-28655	Nessus	Misc.	Local	high
202245	Ubuntu 16.04 LTS : Apport vulnerabilities (USN-6894-1)	Nessus	Ubuntu Local Security Checks	Local	high
161252	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Apport vulnerabilities (USN-5427-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2022-28655

high

Tenable Plugins

high

high

high