Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

The remote host is affected by the vulnerability described in GLSA-202210-11 (schroot: Denial of Service)

  - Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on     the schroot service for all users that may start a schroot session. (CVE-2022-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5584-1 advisory.

    It was discovered that Schroot incorrectly handled certain Schroot names. An attacker could possibly use     this issue to break schroot's internal state causing a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3075 advisory.

  - Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on     the schroot service for all users that may start a schroot session. (CVE-2022-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5213 advisory.

  - Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on     the schroot service for all users that may start a schroot session. (CVE-2022-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
166724	GLSA-202210-11 : schroot: Denial of Service	Nessus	Gentoo Local Security Checks	medium
164483	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Schroot vulnerability (USN-5584-1)	Nessus	Ubuntu Local Security Checks	medium
164285	Debian DLA-3075-1 : schroot - LTS security update	Nessus	Debian Local Security Checks	medium
164283	Debian DSA-5213-1 : schroot - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2022-2787

medium

Tenable Plugins

medium

medium

medium

medium