Oracle Linux 8:virt: rhel (ELSA-2019-1580)

high Nessus 插件 ID 180761

简介

远程 Oracle Linux 主机缺少一个或多个安全更新。

描述

远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2019-1580 公告中提及的多个漏洞的影响。

- 4.10.1 之前的 4.x.x 和 5.4.1 之前的 5.x.x virConnectGetDomainCapabilities() libvirt API 版本接受 emulatorbin 参数以指定针对域提供仿真的程序。自 v1.2.19 起, libvirt 将执行该程序探测域的功能。只读客户端可以针对此参数指定任意路径,造成 libvirtd 以自己的权限执行特制的可执行文件。(CVE-2019-10167)

- virConnectBaselineHypervisorCPU() 和 virConnectCompareHypervisorCPU() libvirt API、4.10.1 之前的 4.x.x 和 5.4.1 之前的 5.x.x 接受仿真器参数,以为域制定提供仿真的程序。自 v1.2.19 起, libvirt 将执行该程序探测域的功能。只读客户端可以针对此参数指定任意路径,造成 libvirtd 以自己的权限执行特制的可执行文件。(CVE-2019-10168)

- 发现 4.10.1 和 5.4.1 之前的 libvirtd 版本会允许只读客户端使用 virDomainSaveImageGetXMLDesc() API 指定任意路径(可使用 libvirtd 进程的权限访问)。能够访问 libvirtd 套接字的攻击者可利用此漏洞探测任意文件的存在、造成拒绝服务或造成 libvirtd 执行任意程序。(CVE-2019-10161)

- 发现 4.10.1 之前的 4.x.x 和 5.4.1 之前的 5.x.x libvirtd 版本允许只读客户端使用 virDomainManagedSaveDefineXML() API,可能允许客户端修改托管保存状态文件。如果特权用户已经创建了托管存档,则本地攻击者可以修改此文件,使得在域恢复时,libvirtd 可以执行任意程序。
(CVE-2019-10166)

请注意,Nessus 尚未测试这些问题,而是只依据应用程序自我报告的版本号进行判断。

解决方案

更新受影响的程序包。

另见

https://linux.oracle.com/errata/ELSA-2019-1580.html

插件详情

严重性: High

ID: 180761

文件名: oraclelinux_ELSA-2019-1580.nasl

版本: 1.2

类型: local

代理: unix

发布时间: 2023/9/7

最近更新时间: 2024/11/1

支持的传感器: Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus

风险信息

VPR

风险因素: Medium

分数: 5.9

CVSS v2

风险因素: High

基本分数: 7.2

时间分数: 5.3

矢量: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS 分数来源: CVE-2019-10161

CVSS v3

风险因素: High

基本分数: 7.8

时间分数: 6.8

矢量: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

时间矢量: CVSS:3.0/E:U/RL:O/RC:C

CVSS 分数来源: CVE-2019-10168

漏洞信息

CPE: p-cpe:/a:oracle:linux:libvirt-daemon-config-nwfilter, p-cpe:/a:oracle:linux:libguestfs-gfs2, p-cpe:/a:oracle:linux:netcf-devel, p-cpe:/a:oracle:linux:qemu-kvm-block-iscsi, p-cpe:/a:oracle:linux:python3-hivex, p-cpe:/a:oracle:linux:libvirt-daemon, p-cpe:/a:oracle:linux:ruby-hivex, p-cpe:/a:oracle:linux:libiscsi-utils, p-cpe:/a:oracle:linux:libiscsi-devel, p-cpe:/a:oracle:linux:sgabios-bin, p-cpe:/a:oracle:linux:libguestfs-bash-completion, p-cpe:/a:oracle:linux:qemu-kvm-block-gluster, p-cpe:/a:oracle:linux:ruby-libguestfs, p-cpe:/a:oracle:linux:netcf, p-cpe:/a:oracle:linux:libvirt-lock-sanlock, p-cpe:/a:oracle:linux:libguestfs-rsync, p-cpe:/a:oracle:linux:libguestfs-javadoc, p-cpe:/a:oracle:linux:virt-dib, p-cpe:/a:oracle:linux:libvirt-nss, p-cpe:/a:oracle:linux:libguestfs-tools-c, p-cpe:/a:oracle:linux:perl-sys-guestfs, p-cpe:/a:oracle:linux:libvirt, p-cpe:/a:oracle:linux:nbdkit, p-cpe:/a:oracle:linux:qemu-kvm-block-ssh, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-rbd, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-gluster, p-cpe:/a:oracle:linux:libvirt-libs, p-cpe:/a:oracle:linux:nbdkit-plugin-python-common, p-cpe:/a:oracle:linux:libvirt-daemon-config-network, p-cpe:/a:oracle:linux:libvirt-daemon-driver-qemu, p-cpe:/a:oracle:linux:libiscsi, p-cpe:/a:oracle:linux:virt-p2v-maker, p-cpe:/a:oracle:linux:libvirt-dbus, p-cpe:/a:oracle:linux:qemu-kvm, p-cpe:/a:oracle:linux:libvirt-admin, p-cpe:/a:oracle:linux:libguestfs-gobject-devel, p-cpe:/a:oracle:linux:hivex-devel, p-cpe:/a:oracle:linux:libguestfs-tools, p-cpe:/a:oracle:linux:qemu-kvm-block-rbd, p-cpe:/a:oracle:linux:libguestfs-devel, p-cpe:/a:oracle:linux:nbdkit-basic-plugins, p-cpe:/a:oracle:linux:nbdkit-plugin-xz, p-cpe:/a:oracle:linux:python3-libguestfs, p-cpe:/a:oracle:linux:libguestfs-inspect-icons, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-disk, p-cpe:/a:oracle:linux:libguestfs-man-pages-uk, p-cpe:/a:oracle:linux:perl-sys-virt, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-scsi, p-cpe:/a:oracle:linux:python3-libvirt, p-cpe:/a:oracle:linux:sgabios, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-core, p-cpe:/a:oracle:linux:nbdkit-example-plugins, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage, p-cpe:/a:oracle:linux:nbdkit-plugin-gzip, p-cpe:/a:oracle:linux:qemu-kvm-common, p-cpe:/a:oracle:linux:lua-guestfs, p-cpe:/a:oracle:linux:libvirt-daemon-driver-secret, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-iscsi, p-cpe:/a:oracle:linux:netcf-libs, p-cpe:/a:oracle:linux:nbdkit-devel, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-logical, p-cpe:/a:oracle:linux:qemu-img, p-cpe:/a:oracle:linux:qemu-kvm-block-curl, p-cpe:/a:oracle:linux:qemu-kvm-core, cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:perl-hivex, p-cpe:/a:oracle:linux:libvirt-daemon-kvm, p-cpe:/a:oracle:linux:qemu-guest-agent, p-cpe:/a:oracle:linux:libguestfs-man-pages-ja, p-cpe:/a:oracle:linux:nbdkit-plugin-vddk, p-cpe:/a:oracle:linux:nbdkit-plugin-python3, p-cpe:/a:oracle:linux:libssh2, p-cpe:/a:oracle:linux:nbdkit-bash-completion, p-cpe:/a:oracle:linux:libguestfs-java-devel, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nwfilter, p-cpe:/a:oracle:linux:libvirt-docs, p-cpe:/a:oracle:linux:libguestfs-benchmarking, p-cpe:/a:oracle:linux:libvirt-daemon-driver-interface, p-cpe:/a:oracle:linux:libvirt-bash-completion, p-cpe:/a:oracle:linux:supermin, p-cpe:/a:oracle:linux:libvirt-client, p-cpe:/a:oracle:linux:libguestfs-xfs, p-cpe:/a:oracle:linux:virt-v2v, p-cpe:/a:oracle:linux:libguestfs-rescue, p-cpe:/a:oracle:linux:hivex, p-cpe:/a:oracle:linux:libvirt-daemon-driver-network, p-cpe:/a:oracle:linux:seabios-bin, p-cpe:/a:oracle:linux:libguestfs, p-cpe:/a:oracle:linux:libguestfs-gobject, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-mpath, p-cpe:/a:oracle:linux:libguestfs-winsupport, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nodedev, p-cpe:/a:oracle:linux:supermin-devel, p-cpe:/a:oracle:linux:seavgabios-bin, p-cpe:/a:oracle:linux:seabios, p-cpe:/a:oracle:linux:libguestfs-java, p-cpe:/a:oracle:linux:libvirt-devel

必需的 KB 项: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux

易利用性: No known exploits are available

补丁发布日期: 2019/7/30

漏洞发布日期: 2019/6/20

参考资料信息

CVE: CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168