The version of ecs-service-connect-agent installed on the remote host is prior to v1.27.2.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-016 advisory.

    An issue was found in libcurl which allows cookies to be inserted into a running program if specific     conditions are met. The libcurl provided function, curl_easy_duphandle(), is used to duplicate the     easy_handle associated with a transfer. If a duplicated transfer's easy_handle has cookies enabled when it     is duplicated, the cookie-enabled state is cloned but the actual cookies are not. If the source     easy_handle didn't read cookies from disk, the cloned easy_handle will attempt to read cookies from a file     named 'none' in the local directory, potentially allowing arbitrary cookies to be loaded. (CVE-2023-38546)

    Line directives (//line) can be used to bypass the restrictions on //go:cgo_ directives, allowing     blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution     of arbitrary code when running go build. The line directive requires the absolute path of the file in     which the directive lives, which makes exploiting this issue significantly more complex. (CVE-2023-39323)

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2023-016)

critical Nessus Plugin ID 184181

Version 1.7