Detections
Analytics

Amazon Linux 2 : fence-agents (ALAS-2019-1348)

medium Nessus Plugin ID 130601

Language:

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.(CVE-2019-10153)

Solution

Run 'yum update fence-agents' to update your system.

See Also

https://alas.aws.amazon.com/AL2/ALAS-2019-1348.html

Plugin Details

Severity: Medium

ID: 130601

File Name: al2_ALAS-2019-1348.nasl

Version: 1.3

Type: local

Agent: unix

Published: 11/7/2019

Updated: 4/15/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 1.6

CVSS v2

Risk Factor: Medium

Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS Score Source: CVE-2019-10153

CVSS v3

Risk Factor: Medium

Base Score: 5

Temporal Score: 4.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:amazon:linux:fence-agents-hpblade, p-cpe:/a:amazon:linux:fence-agents-rsb, p-cpe:/a:amazon:linux:fence-agents-drac5, p-cpe:/a:amazon:linux:fence-agents-debuginfo, p-cpe:/a:amazon:linux:fence-agents-ipmilan, cpe:/o:amazon:linux:2, p-cpe:/a:amazon:linux:fence-agents-vmware-rest, p-cpe:/a:amazon:linux:fence-agents-common, p-cpe:/a:amazon:linux:fence-agents-amt-ws, p-cpe:/a:amazon:linux:fence-agents-gce, p-cpe:/a:amazon:linux:fence-agents-ilo-mp, p-cpe:/a:amazon:linux:fence-agents-apc, p-cpe:/a:amazon:linux:fence-agents-mpath, p-cpe:/a:amazon:linux:fence-agents-bladecenter, p-cpe:/a:amazon:linux:fence-agents-emerson, p-cpe:/a:amazon:linux:fence-agents-sbd, p-cpe:/a:amazon:linux:fence-agents-rhevm, p-cpe:/a:amazon:linux:fence-agents-intelmodular, p-cpe:/a:amazon:linux:fence-agents-ilo2, p-cpe:/a:amazon:linux:fence-agents-ilo-moonshot, p-cpe:/a:amazon:linux:fence-agents-scsi, p-cpe:/a:amazon:linux:fence-agents-ilo-ssh, p-cpe:/a:amazon:linux:fence-agents-eaton-snmp, p-cpe:/a:amazon:linux:fence-agents-vmware-soap, p-cpe:/a:amazon:linux:fence-agents-ibmblade, p-cpe:/a:amazon:linux:fence-agents-ifmib, p-cpe:/a:amazon:linux:fence-agents-brocade, p-cpe:/a:amazon:linux:fence-agents-all, p-cpe:/a:amazon:linux:fence-agents-virsh, p-cpe:/a:amazon:linux:fence-agents-eps, p-cpe:/a:amazon:linux:fence-agents-aws, p-cpe:/a:amazon:linux:fence-agents-ipdu, p-cpe:/a:amazon:linux:fence-agents-compute, p-cpe:/a:amazon:linux:fence-agents-aliyun, p-cpe:/a:amazon:linux:fence-agents-cisco-ucs, p-cpe:/a:amazon:linux:fence-agents-wti, p-cpe:/a:amazon:linux:fence-agents-kdump, p-cpe:/a:amazon:linux:fence-agents-apc-snmp, p-cpe:/a:amazon:linux:fence-agents-rsa, p-cpe:/a:amazon:linux:fence-agents-cisco-mds, p-cpe:/a:amazon:linux:fence-agents-heuristics-ping, p-cpe:/a:amazon:linux:fence-agents-redfish

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 11/7/2019

Vulnerability Publication Date: 7/30/2019

Reference Information

CVE: CVE-2019-10153

ALAS: 2019-1348