Detections
Analytics
OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)
medium Nessus Plugin ID 137170
Language:
Synopsis
The remote OracleVM host is missing one or more security updates.Description
The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0021 for details.Solution
Update the affected bind-libs / bind-utils packages.See Also
https://oss.oracle.com/pipermail/oraclevm-errata/2020-June/000984.html
https://oss.oracle.com/pipermail/oraclevm-errata/2020-June/000981.html
https://oss.oracle.com/pipermail/oraclevm-errata/2020-June/000982.html
Plugin Details
Severity: Medium
ID: 137170
File Name: oraclevm_OVMSA-2020-0021.nasl
Version: 1.6
Type: local
Family: OracleVM Local Security Checks
Published: 6/5/2020
Updated: 3/7/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.1
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2008-0122
CVSS v3
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 6.3
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS Score Source: CVE-2008-1447
Vulnerability Information
CPE: p-cpe:/a:oracle:vm:bind-libs, cpe:/o:oracle:vm_server:3.3, p-cpe:/a:oracle:vm:bind-utils, cpe:/o:oracle:vm_server:3.4
Required KB Items: Host/local_checks_enabled, Host/OracleVM/release, Host/OracleVM/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/5/2020
Vulnerability Publication Date: 9/6/2006
Exploitable With
Core Impact
Reference Information
CVE: CVE-2006-4095, CVE-2007-2241, CVE-2007-2925, CVE-2007-2926, CVE-2007-6283, CVE-2008-0122, CVE-2008-1447, CVE-2009-0025, CVE-2009-0696, CVE-2010-0097, CVE-2010-0290, CVE-2011-0414, CVE-2011-1910, CVE-2011-2464, CVE-2012-1033, CVE-2012-1667, CVE-2012-3817, CVE-2012-4244, CVE-2012-5166, CVE-2012-5688, CVE-2012-5689, CVE-2013-2266, CVE-2013-4854, CVE-2014-0591, CVE-2014-8500, CVE-2015-1349, CVE-2015-4620, CVE-2015-5477, CVE-2015-5722, CVE-2015-8000, CVE-2015-8704, CVE-2016-1285, CVE-2016-1286, CVE-2016-2776, CVE-2016-2848, CVE-2016-8864, CVE-2016-9147, CVE-2017-3136, CVE-2017-3137, CVE-2017-3142, CVE-2017-3143, CVE-2017-3145, CVE-2018-5740, CVE-2018-5743, CVE-2020-8616, CVE-2020-8617
BID: 19859, 25037, 27283, 30131, 33151, 35848, 37118, 37865, 46491, 48007, 48566, 51898, 53772, 54658, 55522, 55852, 56817, 57556, 58736, 61479, 64801, 71590, 72673, 75588