RHEL 7 : kernel (RHSA-2020:0543)

High Nessus Plugin ID 133786

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 7.4

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0543 advisory.

- kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856)

- kernel: use-after-free in fs/xfs/xfs_super.c (CVE-2018-20976)

- kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation (CVE-2019-11085)

- kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (CVE-2019-11599)

- kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c (CVE-2019-14895)

- kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c (CVE-2019-17133)

- kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow (CVE-2019-17666)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://cwe.mitre.org/data/definitions/20.html

https://cwe.mitre.org/data/definitions/119.html

https://cwe.mitre.org/data/definitions/120.html

https://cwe.mitre.org/data/definitions/122.html

https://cwe.mitre.org/data/definitions/250.html

https://cwe.mitre.org/data/definitions/362.html

https://cwe.mitre.org/data/definitions/416.html

https://cwe.mitre.org/data/definitions/667.html

https://access.redhat.com/security/cve/CVE-2018-20856

https://access.redhat.com/security/cve/CVE-2018-20976

https://access.redhat.com/security/cve/CVE-2019-11085

https://access.redhat.com/security/cve/CVE-2019-11599

https://access.redhat.com/security/cve/CVE-2019-14895

https://access.redhat.com/security/cve/CVE-2019-17133

https://access.redhat.com/security/cve/CVE-2019-17666

https://access.redhat.com/errata/RHSA-2020:0543

https://bugzilla.redhat.com/1705937

https://bugzilla.redhat.com/1710405

https://bugzilla.redhat.com/1738705

https://bugzilla.redhat.com/1743547

https://bugzilla.redhat.com/1763690

https://bugzilla.redhat.com/1771909

https://bugzilla.redhat.com/1774870

Plugin Details

Severity: High

ID: 133786

File Name: redhat-RHSA-2020-0543.nasl

Version: 1.4

Type: local

Agent: unix

Published: 2020/02/19

Updated: 2020/11/18

Dependencies: 12634, 122878

Risk Information

Risk Factor: High

VPR Score: 7.4

CVSS Score Source: CVE-2019-17666

CVSS v2.0

Base Score: 8.3

Temporal Score: 6.5

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

CVSS v3.0

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:redhat:rhel_eus:7.5, cpe:/o:redhat:rhel_eus:7.5::computenode, cpe:/o:redhat:rhel_eus:7.5::server, p-cpe:/a:redhat:enterprise_linux:kernel, p-cpe:/a:redhat:enterprise_linux:kernel-abi-whitelists, p-cpe:/a:redhat:enterprise_linux:kernel-bootwrapper, p-cpe:/a:redhat:enterprise_linux:kernel-debug, p-cpe:/a:redhat:enterprise_linux:kernel-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-devel, p-cpe:/a:redhat:enterprise_linux:kernel-headers, p-cpe:/a:redhat:enterprise_linux:kernel-kdump, p-cpe:/a:redhat:enterprise_linux:kernel-kdump-devel, p-cpe:/a:redhat:enterprise_linux:kernel-tools, p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs, p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs-devel, p-cpe:/a:redhat:enterprise_linux:perf, p-cpe:/a:redhat:enterprise_linux:python-perf

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2020/02/19

Vulnerability Publication Date: 2019/04/29

Reference Information

CVE: CVE-2018-20856, CVE-2018-20976, CVE-2019-11085, CVE-2019-11599, CVE-2019-14895, CVE-2019-17133, CVE-2019-17666

BID: 108113, 108488

RHSA: 2020:0543

CWE: 20, 119, 120, 122, 250, 362, 416, 667