A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Nessus relies on the presence of the package as reported by the vendor.

A flaw was found in the permissions of a log file created by kexec- tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4404 advisory.

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kexec-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kexec-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local     unprivileged user to read this file and leak kernel internal information from a previous panic. The     highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by     Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. (CVE-2021-20269)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4404 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-4404 advisory.

    [2.0.20-57.0.3]
    - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]

    [2.0.20-57.0.2]
    - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]

    [2.0.20-57.0.1]
    - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]

    [2.0.20-57]
    - kdumpctl: enable secure boot on ppc64le LPARs

    [2.0.20-56]
    - kdumpctl: fix a typo

    [2.0.20-55]
    - kdump/ppc64: migration action registration clean up

    [2.0.20-54]
    - kdump/ppc64: rebuild initramfs image after migration
    - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
    - kdump.sysconfig.s390: Remove 'prot_virt' from kdump kernel cmdline

    [2.0.20-53]
    - check for invalid physical address of /proc/kcore when making ELF dumpfile
    - check for invalid physical address of /proc/kcore when finding max_paddr
    - fix format issue in find_online_znet_device
    - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
    - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()

    [2.0.20-52]
    - Write to /var/lib/kdump if  not writable
    - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
    - mkdumprd: display the absolute path of dump location in the check_user_configured_target()

    [2.0.20-51]
    - Stop reloading kdump service on CPU hotplug event for FADump
    - fadump: improve fadump-howto.txt about remote dump target setup

    [2.0.20-50]
    - rd.route should use the name from kdump_setup_ifname
    - get kdump ifname once in kdump_install_netdev

    [2.0.20-49]
    - kdump-lib.sh: fix the case if no enough total RAM for kdump  in get_recommend_size()

    [2.0.20-48]
    - kdumpctl: Add kdumpctl estimate
    - mkdumprd: make use of the new get_luks_crypt_dev helper
    - kdump-lib.sh: introduce a helper to get all crypt dev used by kdump
    - kdump-lib.sh: introduce a helper to get underlying crypt device
    - RHEL-only: keep total memory size coherent to RHEL-only kernel patch
    - Show write byte size in report messages
    - Add shorthand --show-stats option to show report stats
    - Add --dry-run option to prevent writing the dumpfile
    - kdump-lib.sh: introduce functions to return recommened mem size

    [2.0.20-47]
    - Implement IP netmask calculation to replace 'ipcalc -m'
    - kdumpctl: fix check_config error when kdump.conf is empty
    - Fix incorrect vmcore permissions when dumped through ssh
    - Fix incorrect permissions on kdump dmesg file

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4404 advisory.

    The kexec-tools packages contain the /sbin/kexec binary and utilities that together form the user-space     component of the kernel's kexec feature. The /sbin/kexec binary facilitates a new kernel to boot using the     kernel's kexec feature either on a normal or a panic reboot. The kexec fastboot mechanism allows booting a     Linux kernel from the context of an already running kernel.

    Security Fix(es):

    * kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
223648	Linux Distros Unpatched Vulnerability : CVE-2021-20269	Nessus	Misc.	medium
502991	Siemens SIMATIC S7-1500 TM MFP BIOS Incorrect Default Permissions (CVE-2021-20269)	Tenable OT Security	Tenable.ot	medium
184765	Rocky Linux 8 : kexec-tools (RLSA-2021:4404)	Nessus	Rocky Linux Local Security Checks	medium
169403	EulerOS Virtualization 2.10.0 : kexec-tools (EulerOS-SA-2022-2907)	Nessus	Huawei Local Security Checks	medium
169366	EulerOS Virtualization 2.10.1 : kexec-tools (EulerOS-SA-2022-2933)	Nessus	Huawei Local Security Checks	medium
166855	EulerOS 2.0 SP10 : kexec-tools (EulerOS-SA-2022-2655)	Nessus	Huawei Local Security Checks	medium
166835	EulerOS 2.0 SP10 : kexec-tools (EulerOS-SA-2022-2687)	Nessus	Huawei Local Security Checks	medium
157508	AlmaLinux 8 : kexec-tools (ALSA-2021:4404)	Nessus	Alma Linux Local Security Checks	medium
155420	Oracle Linux 8 : kexec-tools (ELSA-2021-4404)	Nessus	Oracle Linux Local Security Checks	medium
155180	CentOS 8 : kexec-tools (CESA-2021:4404)	Nessus	CentOS Local Security Checks	medium
155179	RHEL 8 : kexec-tools (RHSA-2021:4404)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-20269

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium