An update of the rpm package has been released.

The version of rpm installed on the remote host is prior to 4.11.3-40.79. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1521 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the RPM package in the read     functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable     package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this     vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha.(CVE-2021-3421)

  - A flaw was found in RPM's hdrblobInit() in     lib/header.c. This flaw allows an attacker who can     modify the rpmdb to cause an out-of-bounds read. The     highest threat from this vulnerability is to system     availability.(CVE-2021-20266)

  - A flaw was found in RPM's signature check functionality     when reading a package file. This flaw allows an     attacker who can convince a victim to install a     seemingly verifiable package, whose signature header     was modified, to cause RPM database corruption and     execute code. The highest threat from this     vulnerability is to data integrity, confidentiality,     and system availability.(CVE-2021-20271)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the RPM package in the read     functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable     package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this     vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha.(CVE-2021-3421)

  - A flaw was found in RPM's hdrblobInit() in     lib/header.c. This flaw allows an attacker who can     modify the rpmdb to cause an out-of-bounds read. The     highest threat from this vulnerability is to system     availability.(CVE-2021-20266)

  - A flaw was found in RPM's signature check functionality     when reading a package file. This flaw allows an     attacker who can convince a victim to install a     seemingly verifiable package, whose signature header     was modified, to cause RPM database corruption and     execute code. The highest threat from this     vulnerability is to data integrity, confidentiality,     and system availability.(CVE-2021-20271)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the rpm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in RPM's signature check functionality     when reading a package file. This flaw allows an     attacker who can convince a victim to install a     seemingly verifiable package, whose signature header     was modified, to cause RPM database corruption and     execute code. The highest threat from this     vulnerability is to data integrity, confidentiality,     and system availability.(CVE-2021-20271)

  - A flaw was found in RPM's hdrblobInit() in     lib/header.c. This flaw allows an attacker who can     modify the rpmdb to cause an out-of-bounds read. The     highest threat from this vulnerability is to system     availability.(CVE-2021-20266)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2685-1 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

  - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw     allows an attacker to achieve code execution if they can alter the header information of an RPM package     and then trick a user or system into installing it. The highest risk of this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in RPM's signature check functionality     when reading a package file. This flaw allows an     attacker who can convince a victim to install a     seemingly verifiable package, whose signature header     was modified, to cause RPM database corruption and     execute code. The highest threat from this     vulnerability is to data integrity, confidentiality,     and system availability.(CVE-2021-20271)

  - A flaw was found in the RPM package in the read     functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable     package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this     vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha.(CVE-2021-3421)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4771 advisory.

  - rpm: Signature checks bypass via corrupted rpm package (CVE-2021-20271)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3939-1 advisory.

  - A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the     rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system     availability. (CVE-2021-20266)

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can     convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM     database corruption. The highest threat from this vulnerability is to data integrity. This flaw affects     RPM versions before 4.17.0-alpha. (CVE-2021-3421)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20201105.30142. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.30142 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

  - The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has     a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
    (CVE-2021-37750)

  - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows     privilege escalation because supplemental groups are not initialized as expected. Helper programs for     AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group     memberships of the sshd process, if the configuration specifies running the command as a different user.
    (CVE-2021-41617)

  - ** DISPUTED ** An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through     14.0. It permits the visual reordering of characters via control sequences, which can be used to craft     source code that renders different logic than the logical ordering of tokens ingested by compilers and     interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such     that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium     offers the following alternative approach to presenting this concern. An issue is noted in the nature of     international text that can affect applications that implement support for The Unicode Standard and the     Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-     right and right-to-left characters, the visual order of tokens may be different from their logical order.
    Additionally, control characters needed to fully support the requirements of bidirectional text can     further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such     that the ordering of tokens perceived by human reviewers does not match what will be processed by a     compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its     document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also     provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode     Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the     BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading     visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm.
    (CVE-2021-42574)

  - NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow     when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures     encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for     certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how     they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and     PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and     Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
    (CVE-2021-43527)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
148905	Photon OS 1.0: Rpm PHSA-2021-1.0-0383	Nessus	PhotonOS Local Security Checks	2021/4/21	2024/7/22	high
151512	Amazon Linux AMI : rpm (ALAS-2021-1521)	Nessus	Amazon Linux Local Security Checks	2021/7/13	2021/7/13	high
151549	EulerOS Virtualization 2.9.1 : rpm (EulerOS-SA-2021-2186)	Nessus	Huawei Local Security Checks	2021/7/13	2023/12/8	high
152338	EulerOS 2.0 SP9 : rpm (EulerOS-SA-2021-2254)	Nessus	Huawei Local Security Checks	2021/8/9	2023/12/6	high
151160	EulerOS Virtualization for ARM 64 3.0.6.0 : rpm (EulerOS-SA-2021-2015)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
152562	openSUSE 15 Security Update : libdnf (openSUSE-SU-2021:2685-1)	Nessus	SuSE Local Security Checks	2021/8/14	2022/2/25	high
153077	EulerOS 2.0 SP5 : rpm (EulerOS-SA-2021-2346)	Nessus	Huawei Local Security Checks	2021/9/7	2021/9/9	high
154377	EulerOS 2.0 SP3 : rpm (EulerOS-SA-2021-2613)	Nessus	Huawei Local Security Checks	2021/10/25	2021/10/25	high
170840	EulerOS Virtualization 3.0.2.2 : rpm (EulerOS-SA-2023-1306)	Nessus	Huawei Local Security Checks	2023/1/30	2023/1/30	high
155689	RHEL 7 : rpm (RHSA-2021:4771)	Nessus	Red Hat Local Security Checks	2021/11/23	2024/4/28	high
167327	SUSE SLES12 Security Update : rpm (SUSE-SU-2022:3939-1)	Nessus	SuSE Local Security Checks	2022/11/13	2023/7/14	high
164603	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.1)	Nessus	Misc.	2022/9/1	2024/3/5	critical
164564	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.0.2.5)	Nessus	Misc.	2022/9/1	2024/2/2	critical
164605	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.30142)	Nessus	Misc.	2022/9/1	2023/10/13	critical

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high

high

critical

critical

critical