EulerOS 2.0 SP3 : polkit (EulerOS-SA-2020-1424)

medium Nessus Plugin ID 135553

Synopsis

The remote EulerOS host is missing multiple security updates.

Description

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

- The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.(CVE-2015-3218)

- The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.(CVE-2015-3255)

- Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.(CVE-2015-4625)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected polkit packages.

Plugin Details

Severity: Medium

ID: 135553

File Name: EulerOS_SA-2020-1424.nasl

Version: 1.7

Type: local

Family: Huawei Local Security Checks

Published: 4/15/2020

Updated: 3/18/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2015-4625

Vulnerability Information

CPE: p-cpe:/a:huawei:euleros:polkit, p-cpe:/a:huawei:euleros:polkit-devel, cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:polkit-docs

Required KB Items: Host/local_checks_enabled, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp

Excluded KB Items: Host/EulerOS/uvp_version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/16/2020

Reference Information

CVE: CVE-2015-3218, CVE-2015-3255, CVE-2015-4625

BID: 75267

Detections

Analytics