Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2018-1382.NASL
HistoryNov 11, 2018 - 12:00 a.m.

openSUSE Security Update : systemd (openSUSE-2018-1382)

2018-11-1100:00:00
This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
32

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.2%

JSON

This update for systemd fixes the following issues :

Security issues fixed :

  • CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd.
    (bsc#1113632)

  • CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation.
    (bsc#1113665)

Non security issues fixed :

  • dhcp6: split assert_return() to be more debuggable when hit

  • core: skip unit deserialization and move to the next one when unit_deserialize() fails

  • core: properly handle deserialization of unknown unit types (#6476)

  • core: don’t create Requires for workdir if ‘missing ok’ (bsc#1113083)

  • logind: use manager_get_user_by_pid() where appropriate

  • logind: rework manager_get_{user|session}_by_pid() a bit

  • login: fix [email protected] case, so we don’t allow nested sessions (#8051) (bsc#1112024)

  • core: be more defensive if we can’t determine per-connection socket peer (#7329)

  • core: introduce systemd.early_core_pattern= kernel cmdline option

  • core: add missing ‘continue’ statement

  • core/mount: fstype may be NULL

  • journald: don’t ship systemd-journald-audit.socket (bsc#1109252)

  • core: make ‘tmpfs’ dependencies on swapfs a ‘default’ dep, not an ‘implicit’ (bsc#1110445)

  • mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)

  • detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)

  • emergency: make sure console password agents don’t interfere with the emergency shell

  • man: document that ‘nofail’ also has an effect on ordering

  • journald: take leading spaces into account in syslog_parse_identifier

  • journal: do not remove multiple spaces after identifier in syslog message

  • syslog: fix segfault in syslog_parse_priority()

  • journal: fix syslog_parse_identifier()

  • install: drop left-over debug message (#6913)

  • Ship systemd-sysv-install helper via the main package This script was part of systemd-sysvinit sub-package but it was wrong since systemd-sysv-install is a script used to redirect enable/disable operations to chkconfig when the unit targets are sysv init scripts. Therefore it’s never been a SySV init tool.

  • Add udev.no-partlabel-links kernel command-line option.
    This option can be used to disable the generation of the by-partlabel symlinks regardless of the name used.
    (bsc#1089761)

  • man: SystemMaxUse= clarification in journald.conf(5).
    (bsc#1101040)

  • systemctl: load unit if needed in ‘systemctl is-active’ (bsc#1102908)

  • core: don’t freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)

  • Enable or disable machines.target according to the presets (bsc#1107941)

  • cryptsetup: add support for sector-size= option (fate#325697)

  • nspawn: always use permission mode 555 for /sys (bsc#1107640)

  • Bugfix for a race condition between daemon-reload and other commands (bsc#1105031)

  • Fixes an issue where login with root credentials was not possible in init level 5 (bsc#1091677)

  • Fix an issue where services of type ‘notify’ harmless DENIED log entries. (bsc#991901)

  • Does no longer adjust qgroups on existing subvolumes (bsc#1093753)

  • cryptsetup: add support for sector-size= option (#9936) (fate#325697 bsc#1114135)

This update was imported from the SUSE:SLE-15:Update update project.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2018-1382.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(118878);
  script_version("1.8");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2018-15686", "CVE-2018-15688");

  script_name(english:"openSUSE Security Update : systemd (openSUSE-2018-1382)");
  script_summary(english:"Check for the openSUSE-2018-1382 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for systemd fixes the following issues :

Security issues fixed :

  - CVE-2018-15688: A buffer overflow vulnerability in the
    dhcp6 client of systemd allowed a malicious dhcp6 server
    to overwrite heap memory in systemd-networkd.
    (bsc#1113632)

  - CVE-2018-15686: A vulnerability in unit_deserialize of
    systemd allows an attacker to supply arbitrary state
    across systemd re-execution via NotifyAccess. This can
    be used to improperly influence systemd execution and
    possibly lead to root privilege escalation.
    (bsc#1113665)

Non security issues fixed :

  - dhcp6: split assert_return() to be more debuggable when
    hit

  - core: skip unit deserialization and move to the next one
    when unit_deserialize() fails

  - core: properly handle deserialization of unknown unit
    types (#6476)

  - core: don't create Requires for workdir if 'missing ok'
    (bsc#1113083)

  - logind: use manager_get_user_by_pid() where appropriate

  - logind: rework manager_get_{user|session}_by_pid() a bit

  - login: fix [email protected] case, so we don't allow nested
    sessions (#8051) (bsc#1112024)

  - core: be more defensive if we can't determine
    per-connection socket peer (#7329)

  - core: introduce systemd.early_core_pattern= kernel
    cmdline option

  - core: add missing 'continue' statement

  - core/mount: fstype may be NULL

  - journald: don't ship systemd-journald-audit.socket
    (bsc#1109252)

  - core: make 'tmpfs' dependencies on swapfs a 'default'
    dep, not an 'implicit' (bsc#1110445)

  - mount: make sure we unmount tmpfs mounts before we
    deactivate swaps (#7076)

  - detect-virt: do not try to read all of /proc/cpuinfo
    (bsc#1109197)

  - emergency: make sure console password agents don't
    interfere with the emergency shell

  - man: document that 'nofail' also has an effect on
    ordering

  - journald: take leading spaces into account in
    syslog_parse_identifier

  - journal: do not remove multiple spaces after identifier
    in syslog message

  - syslog: fix segfault in syslog_parse_priority()

  - journal: fix syslog_parse_identifier()

  - install: drop left-over debug message (#6913)

  - Ship systemd-sysv-install helper via the main package
    This script was part of systemd-sysvinit sub-package but
    it was wrong since systemd-sysv-install is a script used
    to redirect enable/disable operations to chkconfig when
    the unit targets are sysv init scripts. Therefore it's
    never been a SySV init tool.

  - Add udev.no-partlabel-links kernel command-line option.
    This option can be used to disable the generation of the
    by-partlabel symlinks regardless of the name used.
    (bsc#1089761)

  - man: SystemMaxUse= clarification in journald.conf(5).
    (bsc#1101040)

  - systemctl: load unit if needed in 'systemctl is-active'
    (bsc#1102908)

  - core: don't freeze OnCalendar= timer units when the
    clock goes back a lot (bsc#1090944)

  - Enable or disable machines.target according to the
    presets (bsc#1107941)

  - cryptsetup: add support for sector-size= option
    (fate#325697)

  - nspawn: always use permission mode 555 for /sys
    (bsc#1107640)

  - Bugfix for a race condition between daemon-reload and
    other commands (bsc#1105031)

  - Fixes an issue where login with root credentials was not
    possible in init level 5 (bsc#1091677)

  - Fix an issue where services of type 'notify' harmless
    DENIED log entries. (bsc#991901)

  - Does no longer adjust qgroups on existing subvolumes
    (bsc#1093753)

  - cryptsetup: add support for sector-size= option (#9936)
    (fate#325697 bsc#1114135)

This update was imported from the SUSE:SLE-15:Update update project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1089761"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1090944"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1091677"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1093753"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1101040"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1102908"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1105031"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1107640"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1107941"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1109197"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1109252"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1110445"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1112024"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113083"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113632"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113665"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1114135"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=991901"
  );
  # https://features.opensuse.org/325697
  script_set_attribute(
    attribute:"see_also",
    value:"https://features.opensuse.org/"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected systemd packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libsystemd0-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-devel-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev-mini1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libudev1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-myhostname-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-mymachines");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-mymachines-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-mymachines-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-mymachines-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-systemd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:nss-systemd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-bash-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-container");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-container-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-coredump");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-coredump-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-logger");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-bash-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-container-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-container-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-coredump-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-coredump-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-mini-sysvinit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:systemd-sysvinit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-mini");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:udev-mini-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.0");

  script_set_attribute(attribute:"patch_publication_date", value:"2018/11/09");
  script_set_attribute(attribute:"in_the_news", value:"true");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/11/11");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.0", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.0", reference:"libsystemd0-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libsystemd0-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libsystemd0-mini-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libsystemd0-mini-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev-devel-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev-mini-devel-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev-mini1-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev-mini1-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev1-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libudev1-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-myhostname-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-myhostname-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-mymachines-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-mymachines-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-systemd-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"nss-systemd-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-bash-completion-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-container-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-container-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-coredump-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-coredump-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-debugsource-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-devel-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-logger-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-bash-completion-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-container-mini-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-container-mini-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-coredump-mini-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-coredump-mini-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-debugsource-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-devel-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-mini-sysvinit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"systemd-sysvinit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"udev-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"udev-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"udev-mini-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"udev-mini-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libsystemd0-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libsystemd0-32bit-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libudev-devel-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libudev1-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libudev1-32bit-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"nss-myhostname-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"nss-myhostname-32bit-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"nss-mymachines-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"nss-mymachines-32bit-debuginfo-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"systemd-32bit-234-lp150.20.9.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"systemd-32bit-debuginfo-234-lp150.20.9.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libsystemd0-mini / libsystemd0-mini-debuginfo / libudev-mini-devel / etc");
}
VendorProductVersionCPE
novellopensuselibsystemd0p-cpe:/a:novell:opensuse:libsystemd0
novellopensuselibsystemd0-32bitp-cpe:/a:novell:opensuse:libsystemd0-32bit
novellopensuselibsystemd0-32bit-debuginfop-cpe:/a:novell:opensuse:libsystemd0-32bit-debuginfo
novellopensuselibsystemd0-debuginfop-cpe:/a:novell:opensuse:libsystemd0-debuginfo
novellopensuselibsystemd0-minip-cpe:/a:novell:opensuse:libsystemd0-mini
novellopensuselibsystemd0-mini-debuginfop-cpe:/a:novell:opensuse:libsystemd0-mini-debuginfo
novellopensuselibudev-develp-cpe:/a:novell:opensuse:libudev-devel
novellopensuselibudev-devel-32bitp-cpe:/a:novell:opensuse:libudev-devel-32bit
novellopensuselibudev-mini-develp-cpe:/a:novell:opensuse:libudev-mini-devel
novellopensuselibudev-mini1p-cpe:/a:novell:opensuse:libudev-mini1
Rows per page:
1-10 of 531

References

Related

suse 2
openvas 40
nessus 62
archlinux 1
ibm 4
fedora 11
osv 3
gentoo 1
debian 1
oraclelinux 3
cvelist 2
veracode 3
cbl_mariner 2
f5 1
redhatcve 2
packetstorm 1
zdt 2
cve 2
photon 8
ubuntucve 2
centos 3
nvd 2
altlinux 2
prion 2
ubuntu 5
amazon 4
cloudfoundry 4
debiancve 2
redhat 6
oracle 1
suse
suse
Security update for systemd (important)
2018-11-10 00:11:51
Security update for systemd (important)
2018-11-17 00:16:31
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3644-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3767-2)
2021-04-19 00:00:00
openSUSE: Security Advisory for systemd (openSUSE-SU-2018:3695-1)
2018-11-10 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2018:3644-1)
2019-01-02 00:00:00
SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2018:3767-2)
2018-12-11 00:00:00
openSUSE Security Update : systemd (openSUSE-2019-909)
2019-03-27 00:00:00
archlinux
archlinux
[ASA-201811-11] systemd: multiple issues
2018-11-07 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Cloud Paks are vulnerable to multiple vulnerabilities in Systemd (CVE-2018-15688 CVE-2018-15687 CVE-2018-15686)
2018-12-18 13:50:01
Security Bulletin: A vulnerability in NetworkManager affects PowerKVM
2019-03-04 05:55:02
Security Bulletin: Vulnerabiliies in systemd affect PowerKVM
2019-03-04 05:50:01
fedora
fedora
[SECURITY] Fedora 29 Update: systemd-239-6.git9f3aed1.fc29
2018-11-01 15:07:57
[SECURITY] Fedora 28 Update: systemd-238-10.git438ac26.fc28
2018-11-04 22:10:03
[SECURITY] Fedora 29 Update: systemd-239-11.git4dc7dce.fc29
2019-02-11 01:57:56
osv
osv
systemd - security update
2018-11-19 00:00:00
CVE-2018-15688
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
gentoo
gentoo
systemd: Multiple vulnerabilities
2018-10-30 00:00:00
debian
debian
[SECURITY] [DLA 1580-1] systemd security update
2018-11-19 23:42:42
oraclelinux
oraclelinux
systemd security, bug fix, and enhancement update
2019-08-13 00:00:00
NetworkManager security update
2018-11-27 00:00:00
systemd security update
2019-01-14 00:00:00
cvelist
cvelist
CVE-2018-15688 Out-of-Bounds write in systemd-networkd dhcpv6 option handling
2018-10-25 00:00:00
CVE-2018-15686 systemd: reexec state injection: fgets() on overlong lines leads to line splitting
2018-10-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:26:47
Privilege Escalation
2018-10-29 07:34:47
Denial Of Service (DoS)
2018-10-29 07:43:47
cbl_mariner
cbl_mariner
CVE-2018-15686 affecting package systemd 239-44
2020-09-09 06:09:21
CVE-2018-15688 affecting package systemd 239-44
2020-09-09 06:09:21
f5
f5
K40356136 : systemd vulnerability CVE-2018-15686
2020-11-30 00:00:00
redhatcve
redhatcve
CVE-2018-15686
2022-01-13 06:42:08
CVE-2018-15688
2022-01-13 06:45:36
packetstorm
packetstorm
Linux systemd Line Splitting
2018-10-26 00:00:00
zdt
zdt
systemd - reexec State Injection Exploit
2018-10-29 00:00:00
Linux systemd Line Splitting Exploit
2018-10-26 00:00:00
cve
cve
CVE-2018-15688
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0107
2018-11-06 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0193
2018-11-06 00:00:00
Critical Photon OS Security Update - PHSA-2019-0121
2019-01-14 00:00:00
ubuntucve
ubuntucve
CVE-2018-15688
2018-10-26 00:00:00
CVE-2018-15686
2018-10-26 00:00:00
centos
centos
NetworkManager security update
2018-12-13 20:45:55
libgudev1, systemd security update
2019-01-15 11:38:56
libgudev1, systemd security update
2019-08-30 04:25:11
nvd
nvd
CVE-2018-15688
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
altlinux
altlinux
Security fix for the ALT Linux 9 package NetworkManager version 1.14.5-alt1.gitba83251bba87
2018-11-01 00:00:00
Security fix for the ALT Linux 9 package systemd version 1:239-alt3
2018-10-29 00:00:00
prion
prion
Buffer overflow
2018-10-26 14:29:00
Privilege escalation
2018-10-26 14:29:00
ubuntu
ubuntu
systemd vulnerability
2018-11-05 00:00:00
NetworkManager vulnerability
2018-11-05 00:00:00
systemd vulnerabilities
2018-11-12 00:00:00
amazon
amazon
Important: NetworkManager
2019-01-07 22:07:00
Important: systemd
2019-02-13 18:37:00
Medium: systemd
2021-06-16 20:36:00
cloudfoundry
cloudfoundry
USN-3806-1: systemd vulnerability | Cloud Foundry
2018-11-20 00:00:00
USN-3816-1: systemd vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
USN-3816-3: systemd regression | Cloud Foundry
2018-12-06 00:00:00
debiancve
debiancve
CVE-2018-15688
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
redhat
redhat
(RHSA-2018:3665) Important: NetworkManager security update
2018-11-26 23:01:01
(RHSA-2020:0593) Moderate: systemd security update
2020-02-25 11:32:36
(RHSA-2020:1264) Moderate: systemd security and bug fix update
2020-04-01 07:32:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

70.2%

JSON
Related for OPENSUSE-2018-1382.NASL
suse2openvas40nessus62archlinux1ibm4fedora11osv3gentoo1debian1oraclelinux3cvelist2veracode3cbl_mariner2f51redhatcve2packetstorm1zdt2cve2photon8ubuntucve2centos3nvd2altlinux2prion2ubuntu5amazon4cloudfoundry4debiancve2redhat6oracle1