The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4943-1 advisory.

    Zhihong Tian and Hui Lu found that XStream was vulnerable to remote code execution. A remote attacker     could run arbitrary shell commands by manipulating the processed input stream. This issue affected only     affected Ubuntu 20.10. (CVE-2020-26217)

    It was discovered that XStream was vulnerable to server-side forgery attacks. A remote attacker could     request data from internal resources that are not publicly available only by manipulating the processed     input stream. This issue only affected Ubuntu 20.10. (CVE-2020-26258)

    It was discovered that XStream was vulnerable to arbitrary file deletion on the local host. A remote     attacker could use this to delete arbitrary known files on the host as long as the executing process had     sufficient rights only by manipulating the processed input stream. This issue only affected Ubuntu 20.10.
    (CVE-2020-26259)

    It was discovered that XStream was vulnerable to denial of service, arbitrary code execution, arbitrary     file deletion and server-side forgery attacks. A remote attacker could cause any of those issues by     manipulating the processed input stream. (CVE-2021-21341, CVE-2021-21342, CVE-2021-21343 CVE-2021-21344,     CVE-2021-21345, CVE-2021-21346, CVE-2021-21347, CVE-2021-21348, CVE-2021-21349, CVE-2021-21350,     CVE-2021-21351)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : XStream vulnerabilities (USN-4943-1)

critical Nessus Plugin ID 149408

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.7 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.6 Oct 21, 2023, 5:06 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin metadata Plugin Feed: 202310210506
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901
Version 1.4 Dec 6, 2022, 6:51 PM Reference Plugin Feed: 202212061851