According to the versions of the gdisk package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdisk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7700 advisory.

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202105-03 (GPT fdisk: Integer underflow)

    It was discovered that ReadLogicalParts() function in basicmbr.cc was       missing a bounds check.
  Impact :

    A local attacker could entice a user to insert a malicious formatted       block device (USB stick or SD card for example), that, when processed       with sgdisk, possibly resulting in local escalation of privileges or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7700 advisory.

  - gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)

  - gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:7700 advisory.

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7700 advisory.

  - gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)

  - gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed.

CVE-2021-0308

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed.

For Debian 9 stretch, these problems have been fixed in version 1.0.1-1+deb9u1.

We recommend that you upgrade your gdisk packages.

For the detailed security status of gdisk please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gdisk

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7700 advisory.

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5262-1 advisory.

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
160117	EulerOS 2.0 SP5 : gdisk (EulerOS-SA-2022-1532)	Nessus	Huawei Local Security Checks	4/25/2022	4/25/2022	medium
169653	EulerOS Virtualization 3.0.2.6 : gdisk (EulerOS-SA-2023-1086)	Nessus	Huawei Local Security Checks	1/6/2023	1/6/2023	medium
167821	Rocky Linux 8 : gdisk (RLSA-2022:7700)	Nessus	Rocky Linux Local Security Checks	11/17/2022	11/6/2023	medium
150001	GLSA-202105-03 : GPT fdisk: Integer underflow	Nessus	Gentoo Local Security Checks	5/27/2021	2/17/2022	medium
165878	EulerOS Virtualization 3.0.6.6 : gdisk (EulerOS-SA-2022-2497)	Nessus	Huawei Local Security Checks	10/9/2022	10/9/2022	medium
167119	CentOS 8 : gdisk (CESA-2022:7700)	Nessus	CentOS Local Security Checks	11/8/2022	11/8/2022	medium
167440	AlmaLinux 8 : gdisk (ALSA-2022:7700)	Nessus	Alma Linux Local Security Checks	11/14/2022	11/14/2022	medium
161553	EulerOS 2.0 SP3 : gdisk (EulerOS-SA-2022-1720)	Nessus	Huawei Local Security Checks	5/26/2022	5/26/2022	medium
167074	RHEL 8 : gdisk (RHSA-2022:7700)	Nessus	Red Hat Local Security Checks	11/8/2022	4/28/2024	medium
160696	EulerOS Virtualization 3.0.2.0 : gdisk (EulerOS-SA-2022-1692)	Nessus	Huawei Local Security Checks	5/7/2022	5/7/2022	medium
146324	Debian DLA-2549-1 : gdisk security update	Nessus	Debian Local Security Checks	2/9/2021	2/17/2022	medium
167548	Oracle Linux 8 : gdisk (ELSA-2022-7700)	Nessus	Oracle Linux Local Security Checks	11/15/2022	11/15/2022	medium
157349	Ubuntu 16.04 ESM : GPT fdisk vulnerabilities (USN-5262-1)	Nessus	Ubuntu Local Security Checks	2/3/2022	10/23/2023	medium
170817	EulerOS Virtualization 3.0.2.2 : gdisk (EulerOS-SA-2023-1253)	Nessus	Huawei Local Security Checks	1/30/2023	1/30/2023	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium