The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0368 advisory.

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     binding signature. RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0254 advisory.

    The RPM Package Manager (RPM) is a command-line driven package management system capable of installing,     uninstalling, verifying, querying, and updating software packages.

    Security Fix(es):

    * rpm: RPM does not require subkeys to have a valid binding signature (CVE-2021-3521)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0368 advisory.

    The RPM Package Manager (RPM) is a command-line driven package management system capable of installing,     uninstalling, verifying, querying, and updating software packages.

    Security Fix(es):

    * rpm: RPM does not require subkeys to have a valid binding signature (CVE-2021-3521)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     binding signature. RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the rpm package has been released.

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     'binding signature.' RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     'binding signature.' RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202210-22 (RPM: Multiple Vulnerabilities)

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     binding signature. RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

  - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass     the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root     privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as     system availability. (CVE-2021-35937)

  - A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials     after installing a file. A local unprivileged user could use this flaw to exchange the original file with     a symbolic link to a security-critical file and escalate their privileges on the system. The highest     threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2021-35938)

  - It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only     implemented for the parent directory of the file to be created. A local unprivileged user who owns another     ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2021-35939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:0368 advisory.

  - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a     binding signature. RPM does not check the binding signature of subkeys prior to importing them. If an     attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate     public key, RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data     integrity. To exploit this flaw, an attacker must either compromise an RPM repository or convince an     administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and     public keys from trusted sources. (CVE-2021-3521)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:368 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
185044	Rocky Linux 8 : rpm (RLSA-2022:0368)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	medium
157100	RHEL 8 : rpm (RHSA-2022:0254)	Nessus	Red Hat Local Security Checks	2022/1/26	2024/11/7	medium
157312	RHEL 8 : rpm (RHSA-2022:0368)	Nessus	Red Hat Local Security Checks	2022/2/2	2024/11/7	medium
158431	EulerOS 2.0 SP10 : rpm (EulerOS-SA-2022-1234)	Nessus	Huawei Local Security Checks	2022/2/25	2023/3/21	medium
203828	Photon OS 3.0: Rpm PHSA-2022-3.0-0445	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
177149	EulerOS Virtualization 3.0.6.0 : rpm (EulerOS-SA-2023-2230)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	medium
171195	EulerOS 2.0 SP8 : rpm (EulerOS-SA-2023-1335)	Nessus	Huawei Local Security Checks	2023/2/8	2024/1/16	medium
166726	GLSA-202210-22 : RPM: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/10/31	2023/10/6	medium
158835	AlmaLinux 8 : rpm (ALSA-2022:0368)	Nessus	Alma Linux Local Security Checks	2022/3/11	2023/3/21	medium
157790	Rocky Linux 8 : rpm (RLSA-2022:368)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2022/12/13	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium