RancherOS < 1.0.3 Local Memory Corruption
high Nessus Plugin ID 132248
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote device is missing a vendor-supplied security patchDescription
The remote host is running a version of RancherOS that is prior to v1.0.3, hence is vulnerable to a local memory-corruption vulnerability.Attackers may be able to exploit this issue to execute arbitrary code with elevated privileges (CVE-2017-1000364)
Glibc module in Rancheros contains a vulnerability that allows manipulation of the heap/stack. Attackers may be able to exploit this issue to execute arbitrary code with elevated privileges (CVE-2017-1000366)
Solution
Update to RancherOS v1.0.3 or laterSee Also
Plugin Details
Severity: High
ID: 132248
File Name: rancheros_1_0_3.nasl
Version: 1.4
Type: local
Family: Misc.
Published: 12/19/2019
Updated: 8/19/2020
Dependencies: ssh_get_info.nasl, os_fingerprint_linux_distro.nasl
Risk Information
CVSS Score Source: CVE-2017-1000366
VPR
Risk Factor: Critical
Score: 9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Temporal Vector: E:H/RL:OF/RC:C
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:rancher:rancheros
Required KB Items: Host/local_checks_enabled, Host/RancherOS/version, Host/RancherOS
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/19/2017
Vulnerability Publication Date: 6/19/2017
Exploitable With
Metasploit (Solaris RSH Stack Clash Privilege Escalation)