Detections
Analytics

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : spectre-meltdown-checker (SUSE-SU-2024:0884-1)

medium Nessus Plugin ID 192181

Language:

Synopsis

The remote SUSE host is missing a security update.

Description

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0884-1 advisory.

 - updated to 0.46 This release mainly focuses on the detection of the new Zenbleed (CVE-2023-20593) vulnerability, among few other changes that were in line waiting for a release:
 - feat: detect the vulnerability and mitigation of Zenbleed (CVE-2023-20593)
 - feat: add the linux-firmware repository as another source for CPU microcode versions
 - feat: arm: add Neoverse-N2, Neoverse-V1 and Neoverse-V2
 - fix: docker: adding missing utils (#433)
 - feat: add support for Guix System kernel
 - fix: rewrite SQL to be sqlite3 >= 3.41 compatible (#443)
 - fix: a /devnull file was mistakenly created on the filesystem
 - fix: fwdb: ignore MCEdb versions where an official Intel version exists (fixes #430)

 - updated to 0.45
 - arm64: phytium: Add CPU Implementer Phytium
 - arm64: variant 4: detect ssbd mitigation from kernel img, system.map or kconfig
 - chore: ensure vars are set before being dereferenced (set -u compat)
 - chore: fix indentation
 - chore: fwdb: update to v220+i20220208
 - chore: only attempt to load msr and cpuid module once
 - chore: read_cpuid: use named constants
 - chore: readme: framapic is gone, host the screenshots on GitHub
 - chore: replace 'Vulnerable to' by 'Affected by' in the hw section
 - chore: speculative execution -> transient execution
 - chore: update fwdb to v222+i20220208
 - chore: update Intel Family 6 models
 - chore: wording: model not vulnerable -> model not affected
 - doc: add an FAQ entry about CVE support
 - doc: add an FAQ.md and update the README.md accordingly
 - doc: more FAQ and README
 - doc: readme: make the FAQ entry more visible
 - feat: add --allow-msr-write, no longer write by default (#385), detect when writing is denied
 - feat: add --cpu, apply changes to (read|write)_msr, update fwdb to v221+i20220208
 - feat: add subleaf != 0 support for read_cpuid
 - feat: arm: add Cortex A77 and Neoverse-N1 (fixes #371)
 - feat: bsd: for unimplemented CVEs, at least report when CPU is not affected
 - feat: hw check: add IPRED, RRSBA, BHI features check
 - feat: implement detection for MCEPSC under BSD
 - feat: set default TMPDIR for Android (#415)
 - fix: extract_kernel: don't overwrite kernel_err if already set
 - fix: has_vmm false positive with pcp
 - fix: is_ucode_blacklisted: fix some model names
 - fix: mcedb: v191 changed the MCE table format
 - fix: refuse to run under MacOS and ESXi
 - fix: retpoline: detection on 5.15.28+ (#420)
 - fix: variant4: added case where prctl ssbd status is tagged as 'unknown'

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected spectre-meltdown-checker package.

See Also

https://www.suse.com/security/cve/CVE-2023-20593

http://www.nessus.org/u?3bfcc64d

Plugin Details

Severity: Medium

ID: 192181

File Name: suse_SU-2024-0884-1.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 3/16/2024

Updated: 6/25/2026

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

Percentile: 96.66

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N

CVSS Score Source: CVE-2023-20593

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:spectre-meltdown-checker, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/14/2024

Vulnerability Publication Date: 7/24/2023

Reference Information

CVE: CVE-2023-20593

SuSE: SUSE-SU-2024:0884-1