RHEL 8 : OpenShift Container Platform 4.8.15 packages and (RHSA-2021:3820)

high Nessus Plugin ID 154293
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3820 advisory.

- jenkins: improper permission checks allow canceling queue items and aborting builds (CVE-2021-21670)

- jenkins: session fixation vulnerability (CVE-2021-21671)

- golang: net: lookup functions may return invalid host names (CVE-2021-33195)

- golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)

- golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)

- golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected butane and / or jenkins packages.

See Also

https://cwe.mitre.org/data/definitions/20.html

https://cwe.mitre.org/data/definitions/384.html

https://cwe.mitre.org/data/definitions/400.html

https://cwe.mitre.org/data/definitions/863.html

https://access.redhat.com/security/cve/CVE-2021-34558

https://bugzilla.redhat.com/1983596

https://access.redhat.com/security/cve/CVE-2021-33195

https://access.redhat.com/security/cve/CVE-2021-33197

https://access.redhat.com/security/cve/CVE-2021-33198

https://bugzilla.redhat.com/1989564

https://bugzilla.redhat.com/1989570

https://bugzilla.redhat.com/1989575

https://access.redhat.com/security/cve/CVE-2021-21670

https://access.redhat.com/security/cve/CVE-2021-21671

https://access.redhat.com/errata/RHSA-2021:3820

https://bugzilla.redhat.com/2007749

https://bugzilla.redhat.com/2007750

Plugin Details

Severity: High

ID: 154293

File Name: redhat-RHSA-2021-3820.nasl

Version: 1.2

Type: local

Agent: unix

Published: 10/21/2021

Updated: 10/21/2021

Dependencies: ssh_get_info.nasl, redhat_repos.nasl

Risk Information

CVSS Score Source: CVE-2021-33195

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:jenkins:*:*:*:*:*:*:*, p-cpe:2.3:a:redhat:enterprise_linux:butane:*:*:*:*:*:*:*

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 10/19/2021

Vulnerability Publication Date: 6/30/2021

Reference Information

CVE: CVE-2021-33195, CVE-2021-33197, CVE-2021-33198, CVE-2021-21670, CVE-2021-21671, CVE-2021-34558

CWE: 20, 400, 384, 863

IAVB: 2021-B-0047

IAVA: 2021-A-0335-S

RHSA: 2021:3820