Lucene search
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2020-0668-1.NASLHistoryMar 16, 2020 - 12:00 a.m.
SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2020:0668-1)
2020-03-1600:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
30
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
This update for glibc fixes the following issues :
CVE-2020-10029: Fixed a potential overflow in on-stack buffer during range reduction (bsc#1165784).
Fixed an issue where pthread were not always locked correctly (bsc#1164505).
Document mprotect and introduce section on memory protection (bsc#1163184).
Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:0668-1.
# The text itself is copyright (C) SUSE.
#
include('compat.inc');
if (description)
{
script_id(134621);
script_version("1.4");
script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/21");
script_cve_id("CVE-2020-10029");
script_name(english:"SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2020:0668-1)");
script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
script_set_attribute(attribute:"description", value:
"This update for glibc fixes the following issues :
CVE-2020-10029: Fixed a potential overflow in on-stack buffer during
range reduction (bsc#1165784).
Fixed an issue where pthread were not always locked correctly
(bsc#1164505).
Document mprotect and introduce section on memory protection
(bsc#1163184).
Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1163184");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1164505");
script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1165784");
script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-10029/");
# https://www.suse.com/support/update/announcement/2020/suse-su-20200668-1/
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a19d3081");
script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.
Alternatively you can run the command listed for your product :
SUSE Linux Enterprise Module for Open Buildservice Development Tools
15-SP1:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-668=1
SUSE Linux Enterprise Module for Development Tools 15-SP1:zypper in -t
patch SUSE-SLE-Module-Development-Tools-15-SP1-2020-668=1
SUSE Linux Enterprise Module for Basesystem 15-SP1:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-SP1-2020-668=1");
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-10029");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2020/03/04");
script_set_attribute(attribute:"patch_publication_date", value:"2020/03/13");
script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/16");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-32bit-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-devel-32bit-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-devel-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-devel-static");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-extra-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-locale");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-locale-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-locale-base-32bit-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-locale-base-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-profile");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-utils-32bit-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-utils-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:glibc-utils-src-debugsource");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nscd");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nscd-debuginfo");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"SuSE Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);
sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP1", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP1", os_ver + " SP" + sp);
flag = 0;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-devel-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-devel-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-devel-static-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-locale-base-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-locale-base-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-profile-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-utils-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"glibc-utils-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-debugsource-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-devel-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-devel-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-devel-static-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-extra-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-extra-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-locale-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-locale-base-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-locale-base-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-profile-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-utils-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-utils-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"glibc-utils-src-debugsource-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"nscd-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"nscd-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-devel-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-devel-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-devel-static-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-locale-base-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-locale-base-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-profile-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-utils-32bit-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"glibc-utils-32bit-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-debugsource-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-devel-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-devel-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-devel-static-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-extra-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-extra-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-locale-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-locale-base-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-locale-base-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-profile-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-utils-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-utils-debuginfo-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"glibc-utils-src-debugsource-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"nscd-2.26-13.39.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"nscd-debuginfo-2.26-13.39.1")) flag++;
if (flag)
{
if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
else security_note(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "glibc");
}
| Vendor | Product | Version | CPE |
|---|---|---|---|
| novell | suse_linux | glibc | p-cpe:/a:novell:suse_linux:glibc |
| novell | suse_linux | glibc-32bit-debuginfo | p-cpe:/a:novell:suse_linux:glibc-32bit-debuginfo |
| novell | suse_linux | glibc-debuginfo | p-cpe:/a:novell:suse_linux:glibc-debuginfo |
| novell | suse_linux | glibc-debugsource | p-cpe:/a:novell:suse_linux:glibc-debugsource |
| novell | suse_linux | glibc-devel | p-cpe:/a:novell:suse_linux:glibc-devel |
| novell | suse_linux | glibc-devel-32bit-debuginfo | p-cpe:/a:novell:suse_linux:glibc-devel-32bit-debuginfo |
| novell | suse_linux | glibc-devel-debuginfo | p-cpe:/a:novell:suse_linux:glibc-devel-debuginfo |
| novell | suse_linux | glibc-devel-static | p-cpe:/a:novell:suse_linux:glibc-devel-static |
| novell | suse_linux | glibc-extra | p-cpe:/a:novell:suse_linux:glibc-extra |
| novell | suse_linux | glibc-extra-debuginfo | p-cpe:/a:novell:suse_linux:glibc-extra-debuginfo |
Related
suse
suse
Security update for glibc (moderate)
2020-03-25 00:00:00
veracode
veracode
Buffer Overflow
2020-11-05 03:15:03
nvd
nvd
CVE-2020-10029
2020-03-04 15:15:13
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in GNU C Library ( CVE-2020-10029)
2023-01-12 21:59:00
openvas
openvas
openSUSE: Security Advisory for glibc (openSUSE-SU-2020:0381-1)
2020-03-26 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1288)
2020-03-23 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1369)
2020-04-01 00:00:00
nessus
nessus
openSUSE Security Update : glibc (openSUSE-2020-381)
2020-03-26 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : glibc (EulerOS-SA-2020-1369)
2020-04-02 00:00:00
F5 Networks BIG-IP : glibc vulnerability (K38481791)
2021-06-10 00:00:00
cvelist
cvelist
CVE-2020-10029
2020-03-04 00:00:00
redhatcve
redhatcve
CVE-2020-10029
2020-03-05 17:41:02
f5
f5
K38481791 : glibc vulnerability CVE-2020-10029
2020-09-02 00:00:00
debiancve
debiancve
CVE-2020-10029
2020-03-04 15:15:13
ubuntucve
ubuntucve
CVE-2020-10029
2020-03-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-10029 affecting package glibc 2.28-24
2020-10-08 18:09:54
cve
cve
CVE-2020-10029
2020-03-04 15:15:13
prion
prion
Design/Logic Flaw
2020-03-04 15:15:00
fedora
fedora
[SECURITY] Fedora 32 Update: glibc-2.31-2.fc32
2020-03-31 00:19:49
[SECURITY] Fedora 31 Update: glibc-2.30-11.fc31
2020-04-05 03:04:03
[SECURITY] Fedora 30 Update: glibc-2.29-29.fc30
2020-04-09 17:44:21
redhat
redhat
(RHSA-2021:3315) Moderate: glibc security and bug fix update
2021-08-31 07:29:53
(RHSA-2021:2998) Moderate: glibc security update
2021-08-03 12:09:16
(RHSA-2021:0348) Moderate: glibc security and bug fix update
2021-02-02 09:29:25
mageia
mageia
Updated glibc packages fix security vulnerabilities
2020-03-09 01:37:31
photon
photon
oraclelinux
oraclelinux
glibc security and bug fix update
2021-02-05 00:00:00
glibc security, bug fix, and enhancement update
2020-11-10 00:00:00
amazon
amazon
centos
centos
glibc, nscd security update
2021-02-04 01:02:29
gentoo
gentoo
glibc: Multiple vulnerabilities
2020-06-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package glibc version 6:2.27-alt14
2021-09-23 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2020-07-06 00:00:00
cloudfoundry
cloudfoundry
USN-4416-1: GNU C Library vulnerabilities | Cloud Foundry
2020-08-27 00:00:00
osv
osv
glibc - security update
2022-10-17 00:00:00
debian
debian
[SECURITY] [DLA 3152-1] glibc security update
2022-10-17 15:54:41
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
Related for SUSE_SU-2020-0668-1.NASL