The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3701 advisory.

  - curl: NTLM type-2 heap out-of-bounds buffer read (CVE-2018-16890)

  - wget: Information exposure in set_file_metadata function in xattr.c (CVE-2018-20483)

  - curl: NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)

  - curl: SMTP end-of-response out-of-bounds read (CVE-2019-3823)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were discovered in cURL, an URL transfer library.

  - CVE-2018-16890     Wenxiang Qian of Tencent Blade Team discovered that the     function handling incoming NTLM type-2 messages does not     validate incoming data correctly and is subject to an     integer overflow vulnerability, which could lead to an     out-of-bounds buffer read.

  - CVE-2019-3822     Wenxiang Qian of Tencent Blade Team discovered that the     function creating an outgoing NTLM type-3 header is     subject to an integer overflow vulnerability, which     could lead to an out-of-bounds write.

  - CVE-2019-3823     Brian Carpenter of Geeknik Labs discovered that the code     handling the end-of-response for SMTP is subject to an     out-of-bounds heap read.

This update for curl fixes the following issues :

Security issues fixed :

  - CVE-2019-3823: Fixed a heap out-of-bounds read in the     code handling the end-of-response for SMTP     (bsc#1123378).

  - CVE-2019-3822: Fixed a stack based buffer overflow in     the function creating an outgoing NTLM type-3 message     (bsc#1123377).

  - CVE-2018-16890: Fixed a heap buffer out-of-bounds read     in the function handling incoming NTLM type-2 messages     (bsc#1123371).

This update was imported from the SUSE:SLE-15:Update update project.

This update for curl fixes the following issues :

Security issues fixed :

CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP (bsc#1123378).

CVE-2019-3822: Fixed a stack-based buffer overflow in the function creating an outgoing NTLM type-3 message (bsc#1123377).

CVE-2018-16890: Fixed a heap buffer out-of-bounds read in the function handling incoming NTLM type-2 messages (bsc#1123371).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New curl packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix security issues.

The version of MySQL running on the remote host is 5.7.x prior to 5.7.27. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the July 2019 Critical Patch Update advisory:

  - A stack-based buffer overflow vulnerability in the     'Server: Packaging (cURL)' subcomponent could allow an     unauthenticated attacker to gain complete control of an     affected instance of MySQL Server. (CVE-2019-3822)

  - A vulnerability in the 'Server: Parser' subcomponent.
    This is an easily exploitable vulnerability that allows     a low privileged attacker with network access via     multiple protocols to compromise the server. Successful     attacks involving this vulnerability can result in the     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS). (CVE-2019-2805)

  - A vulnerability in the 'Server: XML' subcomponent. This     is an easily exploitable vulnerability that allows a     low privileged attacker with network access via multiple     protocols to compromise a server.Successful attacks     involving this vulnerability can result in the     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS).
    (CVE-2019-2740)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3701 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: NTLM type-2 heap out-of-bounds buffer read (CVE-2018-16890)

    * wget: Information exposure in set_file_metadata function in xattr.c (CVE-2018-20483)

    * curl: NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)

    * curl: SMTP end-of-response out-of-bounds read (CVE-2019-3823)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
145603	CentOS 8 : curl (CESA-2019:3701)	Nessus	CentOS Local Security Checks	2021/1/29	2024/1/25	critical
121628	Debian DSA-4386-1 : curl - security update	Nessus	Debian Local Security Checks	2019/2/7	2024/6/24	critical
122221	openSUSE Security Update : curl (openSUSE-2019-174)	Nessus	SuSE Local Security Checks	2019/2/15	2024/6/20	critical
121635	SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0249-1)	Nessus	SuSE Local Security Checks	2019/2/7	2024/6/24	critical
121632	Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2019-037-01)	Nessus	Slackware Local Security Checks	2019/2/7	2024/6/24	critical
126783	MySQL 5.7.x < 5.7.27 Multiple Vulnerabilities (Jul 2019 CPU)	Nessus	Databases	2019/7/18	2024/5/9	critical
130568	RHEL 8 : curl (RHSA-2019:3701)	Nessus	Red Hat Local Security Checks	2019/11/6	2025/3/16	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical