CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
10.1%
The remote host is missing a security patch.
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/h:f5:big-ip";
if (description)
{
script_oid("1.3.6.1.4.1.25623.1.0.105481");
script_cve_id("CVE-2015-7613");
script_tag(name:"cvss_base", value:"6.9");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:C/I:C/A:C");
script_version("2024-05-29T05:05:18+0000");
script_name("F5 BIG-IP - Linux kernel vulnerability CVE-2015-7613");
script_xref(name:"URL", value:"https://my.f5.com/manage/s/article/K90230486");
script_tag(name:"impact", value:"Exploitation of this issue requires shell access, and a non-standard and unsupported configuration (such as modifications to Linux configuration files) may expose this issue further. F5 does not recommend manually editing Linux configuration files. There is no remote access vector or data plane exposure.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.");
script_tag(name:"solution", value:"See the referenced vendor advisory for a solution.");
script_tag(name:"summary", value:"The remote host is missing a security patch.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"last_modification", value:"2024-05-29 05:05:18 +0000 (Wed, 29 May 2024)");
script_tag(name:"creation_date", value:"2015-12-09 17:28:24 +0100 (Wed, 09 Dec 2015)");
script_category(ACT_GATHER_INFO);
script_family("F5 Local Security Checks");
script_copyright("Copyright (C) 2015 Greenbone AG");
script_dependencies("gb_f5_big_ip_ssh_login_detect.nasl");
script_mandatory_keys("f5/big_ip/version", "f5/big_ip/active_modules");
exit(0);
}
include("f5.inc");
include("host_details.inc");
include("list_array_func.inc");
include("version_func.inc");
if (!version = get_app_version(cpe: CPE, service: "ssh-login"))
exit(0);
check_f5["LTM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["AAM"] = make_array("affected", "12.0.0;11.4.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["AFM"] = make_array("affected", "12.0.0;11.3.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["AVR"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;");
check_f5["APM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["ASM"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["GTM"] = make_array("affected", "11.1.0-11.6.1;",
"unaffected", "11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["LC"] = make_array("affected", "12.0.0;11.1.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;11.0.0;10.1.0-10.2.4;");
check_f5["PEM"] = make_array("affected", "12.0.0;11.3.0-11.6.1;",
"unaffected", "13.0.0;12.1.0-12.1.2;12.0.0_HF3;11.5.5;");
check_f5["PSM"] = make_array("affected", "11.1.0-11.4.1;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
check_f5["WAM"] = make_array("affected", "11.1.0-11.3.0;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
check_f5["WOM"] = make_array("affected", "11.1.0-11.3.0;",
"unaffected", "11.0.0;10.1.0-10.2.4;");
if (report = f5_is_vulnerable(ca: check_f5, version: version)) {
security_message(port: 0, data: report);
exit(0);
}
exit(99);