The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2058 advisory.

    A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from     files owned by privileged users to unprivileged ones under the right condition. (CVE-2021-3800)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4385 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800)

    * glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink     (CVE-2021-28153)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4385 advisory.

    - Refresh CVE-2021-27219 patcheset, using better-targeted fixes       Resolves: #1939108

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4385 advisory.

  - An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with     G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also     creates the target of the symlink as an empty file, which could conceivably have security relevance if the     symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents     of that file correctly remain unchanged.) (CVE-2021-28153)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from     files owned by privileged users to unprivileged ones under the right condition. (CVE-2021-3800)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
176699	Amazon Linux 2 : glib2 (ALAS-2023-2058)	Nessus	Amazon Linux Local Security Checks	2023/6/5	2024/12/11	medium
155170	RHEL 8 : glib2 (RHSA-2021:4385)	Nessus	Red Hat Local Security Checks	2021/11/11	2024/11/8	medium
155402	Oracle Linux 8 : glib2 (ELSA-2021-4385)	Nessus	Oracle Linux Local Security Checks	2021/11/17	2024/11/2	medium
157589	AlmaLinux 8 : glib2 (ALSA-2021:4385)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	medium
172347	EulerOS 2.0 SP5 : glib2 (EulerOS-SA-2023-1503)	Nessus	Huawei Local Security Checks	2023/3/9	2023/8/31	medium

检测

插件搜索

medium

medium

medium

medium

medium