It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

According to the version of the cockpit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that cockpit before version 184 used     glib's base64 decode functionality incorrectly     resulting in a denial of service attack. An     unauthenticated attacker could send a specially crafted     request with an invalid base64-encoded cookie which     could cause the web service to crash.(CVE-2019-3804)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cockpit packages installed that are affected by a vulnerability:

  - It was found that cockpit used glib's base64 decode     functionality incorrectly resulting in a denial of     service attack. An unauthenticated attacker could send a     specially crafted request with an invalid base64-encoded     cookie which could cause the web service to crash.
    (CVE-2019-3804)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1571 advisory.

    The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization     Manager. The appliance is available to download as an OVA file from the Customer Portal.

    Security Fix(es):

    * cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1569 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The following packages have been upgraded to a later upstream version: redhat-release-virtualization-host     (4.3), redhat-virtualization-host (4.3).

    Security Fix(es):

    * cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for cockpit is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.

Security Fix(es) :

* cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Security Fix(es) :

  - cockpit: Crash when parsing invalid base64 headers     (CVE-2019-3804)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0482 advisory.

    Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network     configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line     sessions, and more.

    Security Fix(es):

    * cockpit: Crash when parsing invalid base64 headers (CVE-2019-3804)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0482 advisory.

    [173.2-1.0.1]
    - turn off display of subscriptions menu item in GUI
    - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oralce.com)
    - Remove Red Hat references.

    [173.2-1]
    - ws: Fix bug parsing invalid base64 headers rhbz#1672296

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
133977	EulerOS 2.0 SP8 : cockpit (EulerOS-SA-2020-1143)	Nessus	Huawei Local Security Checks	high
127264	NewStart CGSL CORE 5.04 / MAIN 5.04 : cockpit Vulnerability (NS-SA-2019-0066)	Nessus	NewStart CGSL Local Security Checks	high
126085	RHEL 7 : rhvm-appliance (RHSA-2019:1571)	Nessus	Red Hat Local Security Checks	high
126084	RHEL 7 : redhat-virtualization-host (RHSA-2019:1569)	Nessus	Red Hat Local Security Checks	high
122951	CentOS 7 : cockpit (CESA-2019:0482)	Nessus	CentOS Local Security Checks	high
122844	Scientific Linux Security Update : cockpit on SL7.x x86_64 (20190313)	Nessus	Scientific Linux Local Security Checks	high
122839	RHEL 7 : cockpit (RHSA-2019:0482)	Nessus	Red Hat Local Security Checks	high
122801	Oracle Linux 7 : cockpit (ELSA-2019-0482)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2019-3804

high

Tenable Plugins

high

high

high

high

high

high

high

high