According to the versions of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message with certain invalid type signatures. (CVE-2022-42010)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message where an array length is inconsistent with the size of the element type.
    (CVE-2022-42011)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by     sending a message with attached file descriptors in an unexpected format. (CVE-2022-42012)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0096 advisory.

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message with certain invalid type signatures. (CVE-2022-42010)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message where an array length is inconsistent with the size of the element type.
    (CVE-2022-42011)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by     sending a message with attached file descriptors in an unexpected format. (CVE-2022-42012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4295-1 advisory.

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message with certain invalid type signatures. (CVE-2022-42010)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message where an array length is inconsistent with the size of the element type.
    (CVE-2022-42011)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by     sending a message with attached file descriptors in an unexpected format. (CVE-2022-42012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of dbus installed on the remote host is prior to 1.12.24-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-260 advisory.

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message with certain invalid type signatures. (CVE-2022-42010)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message where an array length is inconsistent with the size of the element type.
    (CVE-2022-42011)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by     sending a message with attached file descriptors in an unexpected format. (CVE-2022-42012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
174847	EulerOS Virtualization 2.9.1 : dbus (EulerOS-SA-2023-1621)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	medium
175195	EulerOS Virtualization 3.0.2.0 : dbus (EulerOS-SA-2023-1718)	Nessus	Huawei Local Security Checks	2023/5/7	2023/5/7	medium
175744	EulerOS Virtualization 2.10.0 : dbus (EulerOS-SA-2023-1916)	Nessus	Huawei Local Security Checks	2023/5/16	2023/5/16	medium
175776	EulerOS Virtualization 2.10.1 : dbus (EulerOS-SA-2023-1885)	Nessus	Huawei Local Security Checks	2023/5/16	2023/5/16	medium
176834	EulerOS Virtualization 2.11.0 : dbus (EulerOS-SA-2023-2086)	Nessus	Huawei Local Security Checks	2023/6/7	2023/6/7	medium
178873	EulerOS Virtualization 3.0.6.6 : dbus (EulerOS-SA-2023-2408)	Nessus	Huawei Local Security Checks	2023/7/26	2023/7/26	medium
190158	CentOS 8 : dbus (CESA-2023:0096)	Nessus	CentOS Local Security Checks	2024/2/8	2024/2/8	medium
168286	SUSE SLES12 Security Update : dbus-1 (SUSE-SU-2022:4295-1)	Nessus	SuSE Local Security Checks	2022/11/30	2023/7/14	medium
169514	Amazon Linux 2022 : dbus (ALAS2022-2022-260)	Nessus	Amazon Linux Local Security Checks	2023/1/4	2024/12/11	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium