openSUSE 15 Security Update : kernel (openSUSE-SU-2021:1975-1)

critical Nessus Plugin ID 151730
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1975-1 advisory.

- An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c. (CVE-2019-18814)

- In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h). (CVE-2019-19769)

- The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
(CVE-2020-24586)

- The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed. (CVE-2020-24587)

- The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated.
Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets. (CVE-2020-24588)

- A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations. (CVE-2020-25670)

- A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after- free which might lead to privilege escalations. (CVE-2020-25671)

- A memory leak vulnerability was found in Linux kernel in llcp_sock_connect (CVE-2020-25672)

- A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system. (CVE-2020-25673)

- An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients. (CVE-2020-26139)

- An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data- confidentiality protocol. (CVE-2020-26141)

- An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (CVE-2020-26145)

- An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. (CVE-2020-26147)

- An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out- of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit. (CVE-2020-27170)

- An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d. (CVE-2020-27171)

- An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
(CVE-2020-27673)

- A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-27815)

- An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information.
The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-35519)

- An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52.
(CVE-2020-36310)

- An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184. (CVE-2020-36311)

- An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d. (CVE-2020-36312)

- An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950. (CVE-2020-36322)

- An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-20268)

- Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability. (CVE-2021-23134)

- An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables. (CVE-2021-27363)

- An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages. (CVE-2021-27364)

- An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message. (CVE-2021-27365)

- An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.
(CVE-2021-28038)

- An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308. (CVE-2021-28375)

- rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base. (CVE-2021-28660)

- The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable.
XSA-365 was classified to affect versions back to at least 3.11. (CVE-2021-28688)

- An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A stall on CPU can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1. (CVE-2021-28950)

- An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.) (CVE-2021-28952)

- A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc. (CVE-2021-28964)

- In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6. (CVE-2021-28971)

- In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8. (CVE-2021-28972)

- BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. (CVE-2021-29154)

- An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations. (CVE-2021-29155)

- An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6. (CVE-2021-29264)

- An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70.
(CVE-2021-29265)

- An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624. (CVE-2021-29647)

- An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
(CVE-2021-29650)

- An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.
(CVE-2021-30002)

- net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. (CVE-2021-32399)

- In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value. (CVE-2021-33034)

- kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. In particular, there is a corner case where the off reg causes a masking direction change, which then results in an incorrect final aux->alu_limit.
(CVE-2021-33200)

- The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (bpf: Fix truncation handling for mod32 dst reg wrt zero) and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101. (CVE-2021-3444)

- A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected (CVE-2021-3483)

- The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee (bpf, ringbuf: Deny reserve of buffers larger than ringbuf) (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 (bpf: Implement BPF ring buffer and verifier support for it) (v5.8-rc1). (CVE-2021-3489)

- The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e (bpf: Fix alu32 const subreg bound tracking on bitwise operations) (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 (bpf: Verifier, do explicit ALU32 bounds tracking) (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 (bpf:Fix a verifier failure with xor) ( 5.10-rc1). (CVE-2021-3490)

- The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc//mem.
This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (io_uring: add IORING_OP_PROVIDE_BUFFERS) (v5.7-rc1). (CVE-2021-3491)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://bugzilla.suse.com/1043990

https://bugzilla.suse.com/1047233

https://bugzilla.suse.com/1055117

https://bugzilla.suse.com/1065729

https://bugzilla.suse.com/1087082

https://bugzilla.suse.com/1113295

https://bugzilla.suse.com/1133021

https://bugzilla.suse.com/1152457

https://bugzilla.suse.com/1152472

https://bugzilla.suse.com/1152489

https://bugzilla.suse.com/1153274

https://bugzilla.suse.com/1154353

https://bugzilla.suse.com/1155518

https://bugzilla.suse.com/1156256

https://bugzilla.suse.com/1156395

https://bugzilla.suse.com/1159280

https://bugzilla.suse.com/1160634

https://bugzilla.suse.com/1164648

https://bugzilla.suse.com/1167260

https://bugzilla.suse.com/1167574

https://bugzilla.suse.com/1167773

https://bugzilla.suse.com/1168777

https://bugzilla.suse.com/1168838

https://bugzilla.suse.com/1169709

https://bugzilla.suse.com/1171295

https://bugzilla.suse.com/1173485

https://bugzilla.suse.com/1174416

https://bugzilla.suse.com/1174426

https://bugzilla.suse.com/1175995

https://bugzilla.suse.com/1176447

https://bugzilla.suse.com/1176774

https://bugzilla.suse.com/1177028

https://bugzilla.suse.com/1177326

https://bugzilla.suse.com/1177411

https://bugzilla.suse.com/1177437

https://bugzilla.suse.com/1177666

https://bugzilla.suse.com/1178089

https://bugzilla.suse.com/1178134

https://bugzilla.suse.com/1178163

https://bugzilla.suse.com/1178181

https://bugzilla.suse.com/1178330

https://bugzilla.suse.com/1178378

https://bugzilla.suse.com/1178418

https://bugzilla.suse.com/1178612

https://bugzilla.suse.com/1179243

https://bugzilla.suse.com/1179454

https://bugzilla.suse.com/1179458

https://bugzilla.suse.com/1179519

https://bugzilla.suse.com/1179825

https://bugzilla.suse.com/1179827

https://bugzilla.suse.com/1179851

https://bugzilla.suse.com/1180100

https://bugzilla.suse.com/1180197

https://bugzilla.suse.com/1180814

https://bugzilla.suse.com/1180846

https://bugzilla.suse.com/1180980

https://bugzilla.suse.com/1181104

https://bugzilla.suse.com/1181161

https://bugzilla.suse.com/1181383

https://bugzilla.suse.com/1181507

https://bugzilla.suse.com/1181674

https://bugzilla.suse.com/1181862

https://bugzilla.suse.com/1182077

https://bugzilla.suse.com/1182257

https://bugzilla.suse.com/1182377

https://bugzilla.suse.com/1182378

https://bugzilla.suse.com/1182552

https://bugzilla.suse.com/1182574

https://bugzilla.suse.com/1182591

https://bugzilla.suse.com/1182613

https://bugzilla.suse.com/1182712

https://bugzilla.suse.com/1182713

https://bugzilla.suse.com/1182715

https://bugzilla.suse.com/1182716

https://bugzilla.suse.com/1182717

https://bugzilla.suse.com/1182999

https://bugzilla.suse.com/1183022

https://bugzilla.suse.com/1183048

https://bugzilla.suse.com/1183069

https://bugzilla.suse.com/1183077

https://bugzilla.suse.com/1183095

https://bugzilla.suse.com/1183120

https://bugzilla.suse.com/1183203

https://bugzilla.suse.com/1183249

https://bugzilla.suse.com/1183252

https://bugzilla.suse.com/1183277

https://bugzilla.suse.com/1183278

https://bugzilla.suse.com/1183279

https://bugzilla.suse.com/1183280

https://bugzilla.suse.com/1183281

https://bugzilla.suse.com/1183282

https://bugzilla.suse.com/1183283

https://bugzilla.suse.com/1183284

https://bugzilla.suse.com/1183285

https://bugzilla.suse.com/1183286

https://bugzilla.suse.com/1183287

https://bugzilla.suse.com/1183288

https://bugzilla.suse.com/1183289

https://bugzilla.suse.com/1183310

https://bugzilla.suse.com/1183311

https://bugzilla.suse.com/1183312

https://bugzilla.suse.com/1183313

https://bugzilla.suse.com/1183314

https://bugzilla.suse.com/1183315

https://bugzilla.suse.com/1183316

https://bugzilla.suse.com/1183317

https://bugzilla.suse.com/1183318

https://bugzilla.suse.com/1183319

https://bugzilla.suse.com/1183320

https://bugzilla.suse.com/1183321

https://bugzilla.suse.com/1183322

https://bugzilla.suse.com/1183323

https://bugzilla.suse.com/1183324

https://bugzilla.suse.com/1183325

https://bugzilla.suse.com/1183326

https://bugzilla.suse.com/1183346

https://bugzilla.suse.com/1183366

https://bugzilla.suse.com/1183369

https://bugzilla.suse.com/1183386

https://bugzilla.suse.com/1183405

https://bugzilla.suse.com/1183412

https://bugzilla.suse.com/1183427

https://bugzilla.suse.com/1183428

https://bugzilla.suse.com/1183445

https://bugzilla.suse.com/1183447

https://bugzilla.suse.com/1183491

https://bugzilla.suse.com/1183501

https://bugzilla.suse.com/1183509

https://bugzilla.suse.com/1183530

https://bugzilla.suse.com/1183534

https://bugzilla.suse.com/1183540

https://bugzilla.suse.com/1183593

https://bugzilla.suse.com/1183596

https://bugzilla.suse.com/1183598

https://bugzilla.suse.com/1183637

https://bugzilla.suse.com/1183646

https://bugzilla.suse.com/1183658

https://bugzilla.suse.com/1183662

https://bugzilla.suse.com/1183686

https://bugzilla.suse.com/1183692

https://bugzilla.suse.com/1183696

https://bugzilla.suse.com/1183750

https://bugzilla.suse.com/1183757

https://bugzilla.suse.com/1183775

https://bugzilla.suse.com/1183815

https://bugzilla.suse.com/1183843

https://bugzilla.suse.com/1183859

https://bugzilla.suse.com/1183868

https://bugzilla.suse.com/1183871

https://bugzilla.suse.com/1183873

https://bugzilla.suse.com/1183932

https://bugzilla.suse.com/1183947

https://bugzilla.suse.com/1183976

https://bugzilla.suse.com/1184074

https://bugzilla.suse.com/1184081

https://bugzilla.suse.com/1184082

https://bugzilla.suse.com/1184120

https://bugzilla.suse.com/1184167

https://bugzilla.suse.com/1184168

https://bugzilla.suse.com/1184170

https://bugzilla.suse.com/1184171

https://bugzilla.suse.com/1184176

https://bugzilla.suse.com/1184192

https://bugzilla.suse.com/1184193

https://bugzilla.suse.com/1184194

https://bugzilla.suse.com/1184196

https://bugzilla.suse.com/1184197

https://bugzilla.suse.com/1184198

https://bugzilla.suse.com/1184199

https://bugzilla.suse.com/1184208

https://bugzilla.suse.com/1184209

https://bugzilla.suse.com/1184211

https://bugzilla.suse.com/1184217

https://bugzilla.suse.com/1184218

https://bugzilla.suse.com/1184219

https://bugzilla.suse.com/1184220

https://bugzilla.suse.com/1184224

https://bugzilla.suse.com/1184259

https://bugzilla.suse.com/1184264

https://bugzilla.suse.com/1184386

https://bugzilla.suse.com/1184388

https://bugzilla.suse.com/1184391

https://bugzilla.suse.com/1184393

https://bugzilla.suse.com/1184436

https://bugzilla.suse.com/1184485

https://bugzilla.suse.com/1184509

https://bugzilla.suse.com/1184511

https://bugzilla.suse.com/1184512

https://bugzilla.suse.com/1184514

https://bugzilla.suse.com/1184583

https://bugzilla.suse.com/1184585

https://bugzilla.suse.com/1184611

https://bugzilla.suse.com/1184615

https://bugzilla.suse.com/1184650

https://bugzilla.suse.com/1184710

https://bugzilla.suse.com/1184724

https://bugzilla.suse.com/1184728

https://bugzilla.suse.com/1184730

https://bugzilla.suse.com/1184731

https://bugzilla.suse.com/1184736

https://bugzilla.suse.com/1184737

https://bugzilla.suse.com/1184738

https://bugzilla.suse.com/1184740

https://bugzilla.suse.com/1184741

https://bugzilla.suse.com/1184742

https://bugzilla.suse.com/1184760

https://bugzilla.suse.com/1184769

https://bugzilla.suse.com/1184811

https://bugzilla.suse.com/1184855

https://bugzilla.suse.com/1184893

https://bugzilla.suse.com/1184934

https://bugzilla.suse.com/1184942

https://bugzilla.suse.com/1184943

https://bugzilla.suse.com/1184952

https://bugzilla.suse.com/1184953

https://bugzilla.suse.com/1184955

https://bugzilla.suse.com/1184957

https://bugzilla.suse.com/1184969

https://bugzilla.suse.com/1184984

https://bugzilla.suse.com/1185010

https://bugzilla.suse.com/1185041

https://bugzilla.suse.com/1185110

https://bugzilla.suse.com/1185113

https://bugzilla.suse.com/1185233

https://bugzilla.suse.com/1185269

https://bugzilla.suse.com/1185365

https://bugzilla.suse.com/1185428

https://bugzilla.suse.com/1185454

https://bugzilla.suse.com/1185472

https://bugzilla.suse.com/1185491

https://bugzilla.suse.com/1185495

https://bugzilla.suse.com/1185497

https://bugzilla.suse.com/1185549

https://bugzilla.suse.com/1185550

https://bugzilla.suse.com/1185558

https://bugzilla.suse.com/1185573

https://bugzilla.suse.com/1185581

https://bugzilla.suse.com/1185586

https://bugzilla.suse.com/1185587

https://bugzilla.suse.com/1185589

https://bugzilla.suse.com/1185606

https://bugzilla.suse.com/1185640

https://bugzilla.suse.com/1185641

https://bugzilla.suse.com/1185642

https://bugzilla.suse.com/1185645

https://bugzilla.suse.com/1185670

https://bugzilla.suse.com/1185677

https://bugzilla.suse.com/1185680

https://bugzilla.suse.com/1185703

https://bugzilla.suse.com/1185725

https://bugzilla.suse.com/1185736

https://bugzilla.suse.com/1185758

https://bugzilla.suse.com/1185796

https://bugzilla.suse.com/1185840

https://bugzilla.suse.com/1185857

https://bugzilla.suse.com/1185859

https://bugzilla.suse.com/1185860

https://bugzilla.suse.com/1185861

https://bugzilla.suse.com/1185862

https://bugzilla.suse.com/1185863

https://bugzilla.suse.com/1185898

https://bugzilla.suse.com/1185899

https://bugzilla.suse.com/1185911

https://bugzilla.suse.com/1185938

https://bugzilla.suse.com/1185950

https://bugzilla.suse.com/1185954

https://bugzilla.suse.com/1185980

https://bugzilla.suse.com/1185982

https://bugzilla.suse.com/1185987

https://bugzilla.suse.com/1185988

https://bugzilla.suse.com/1186009

https://bugzilla.suse.com/1186060

https://bugzilla.suse.com/1186061

https://bugzilla.suse.com/1186062

https://bugzilla.suse.com/1186111

https://bugzilla.suse.com/1186118

https://bugzilla.suse.com/1186219

https://bugzilla.suse.com/1186285

https://bugzilla.suse.com/1186320

https://bugzilla.suse.com/1186349

https://bugzilla.suse.com/1186352

https://bugzilla.suse.com/1186353

https://bugzilla.suse.com/1186354

https://bugzilla.suse.com/1186355

https://bugzilla.suse.com/1186356

https://bugzilla.suse.com/1186357

https://bugzilla.suse.com/1186390

https://bugzilla.suse.com/1186401

https://bugzilla.suse.com/1186408

https://bugzilla.suse.com/1186416

https://bugzilla.suse.com/1186439

https://bugzilla.suse.com/1186441

https://bugzilla.suse.com/1186451

https://bugzilla.suse.com/1186460

https://bugzilla.suse.com/1186467

https://bugzilla.suse.com/1186479

https://bugzilla.suse.com/1186484

https://bugzilla.suse.com/1186498

https://bugzilla.suse.com/1186501

https://bugzilla.suse.com/1186512

https://bugzilla.suse.com/1186573

https://bugzilla.suse.com/1186681

http://www.nessus.org/u?f54b2161

https://www.suse.com/security/cve/CVE-2019-18814

https://www.suse.com/security/cve/CVE-2019-19769

https://www.suse.com/security/cve/CVE-2020-24586

https://www.suse.com/security/cve/CVE-2020-24587

https://www.suse.com/security/cve/CVE-2020-24588

https://www.suse.com/security/cve/CVE-2020-25670

https://www.suse.com/security/cve/CVE-2020-25671

https://www.suse.com/security/cve/CVE-2020-25672

https://www.suse.com/security/cve/CVE-2020-25673

https://www.suse.com/security/cve/CVE-2020-26139

https://www.suse.com/security/cve/CVE-2020-26141

https://www.suse.com/security/cve/CVE-2020-26145

https://www.suse.com/security/cve/CVE-2020-26147

https://www.suse.com/security/cve/CVE-2020-27170

https://www.suse.com/security/cve/CVE-2020-27171

https://www.suse.com/security/cve/CVE-2020-27673

https://www.suse.com/security/cve/CVE-2020-27815

https://www.suse.com/security/cve/CVE-2020-35519

https://www.suse.com/security/cve/CVE-2020-36310

https://www.suse.com/security/cve/CVE-2020-36311

https://www.suse.com/security/cve/CVE-2020-36312

https://www.suse.com/security/cve/CVE-2020-36322

https://www.suse.com/security/cve/CVE-2021-20268

https://www.suse.com/security/cve/CVE-2021-23134

https://www.suse.com/security/cve/CVE-2021-27363

https://www.suse.com/security/cve/CVE-2021-27364

https://www.suse.com/security/cve/CVE-2021-27365

https://www.suse.com/security/cve/CVE-2021-28038

https://www.suse.com/security/cve/CVE-2021-28375

https://www.suse.com/security/cve/CVE-2021-28660

https://www.suse.com/security/cve/CVE-2021-28688

https://www.suse.com/security/cve/CVE-2021-28950

https://www.suse.com/security/cve/CVE-2021-28952

https://www.suse.com/security/cve/CVE-2021-28964

https://www.suse.com/security/cve/CVE-2021-28971

https://www.suse.com/security/cve/CVE-2021-28972

https://www.suse.com/security/cve/CVE-2021-29154

https://www.suse.com/security/cve/CVE-2021-29155

https://www.suse.com/security/cve/CVE-2021-29264

https://www.suse.com/security/cve/CVE-2021-29265

https://www.suse.com/security/cve/CVE-2021-29647

https://www.suse.com/security/cve/CVE-2021-29650

https://www.suse.com/security/cve/CVE-2021-30002

https://www.suse.com/security/cve/CVE-2021-32399

https://www.suse.com/security/cve/CVE-2021-33034

https://www.suse.com/security/cve/CVE-2021-33200

https://www.suse.com/security/cve/CVE-2021-3428

https://www.suse.com/security/cve/CVE-2021-3444

https://www.suse.com/security/cve/CVE-2021-3483

https://www.suse.com/security/cve/CVE-2021-3489

https://www.suse.com/security/cve/CVE-2021-3490

https://www.suse.com/security/cve/CVE-2021-3491

Plugin Details

Severity: Critical

ID: 151730

File Name: openSUSE-2021-1975.nasl

Version: 1.2

Type: local

Agent: unix

Published: 7/16/2021

Updated: 7/16/2021

Dependencies: ssh_get_info.nasl

Risk Information

CVSS Score Source: CVE-2019-18814

VPR

Risk Factor: Critical

Score: 9.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: E:U/RL:OF/RC:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:cluster-md-kmp-azure, p-cpe:/a:novell:opensuse:dlm-kmp-azure, p-cpe:/a:novell:opensuse:gfs2-kmp-azure, p-cpe:/a:novell:opensuse:kernel-azure, p-cpe:/a:novell:opensuse:kernel-azure-devel, p-cpe:/a:novell:opensuse:kernel-azure-extra, p-cpe:/a:novell:opensuse:kernel-azure-livepatch-devel, p-cpe:/a:novell:opensuse:kernel-azure-optional, p-cpe:/a:novell:opensuse:kernel-devel-azure, p-cpe:/a:novell:opensuse:kernel-source-azure, p-cpe:/a:novell:opensuse:kernel-syms-azure, p-cpe:/a:novell:opensuse:kselftests-kmp-azure, p-cpe:/a:novell:opensuse:ocfs2-kmp-azure, p-cpe:/a:novell:opensuse:reiserfs-kmp-azure, cpe:/o:novell:opensuse:15.3

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 7/11/2021

Vulnerability Publication Date: 11/7/2019

Reference Information

CVE: CVE-2019-18814, CVE-2019-19769, CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673, CVE-2020-26139, CVE-2020-26141, CVE-2020-26145, CVE-2020-26147, CVE-2020-27170, CVE-2020-27171, CVE-2020-27673, CVE-2020-27815, CVE-2020-35519, CVE-2020-36310, CVE-2020-36311, CVE-2020-36312, CVE-2020-36322, CVE-2021-3428, CVE-2021-3444, CVE-2021-3483, CVE-2021-3489, CVE-2021-3490, CVE-2021-3491, CVE-2021-20268, CVE-2021-23134, CVE-2021-27363, CVE-2021-27364, CVE-2021-27365, CVE-2021-28038, CVE-2021-28375, CVE-2021-28660, CVE-2021-28688, CVE-2021-28950, CVE-2021-28952, CVE-2021-28964, CVE-2021-28971, CVE-2021-28972, CVE-2021-29154, CVE-2021-29155, CVE-2021-29264, CVE-2021-29265, CVE-2021-29647, CVE-2021-29650, CVE-2021-30002, CVE-2021-32399, CVE-2021-33034, CVE-2021-33200