The version of amazon-ssm-agent installed on the remote host is prior to 3.2.2222.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2458 advisory.

    2024-04-24: CVE-2023-49568 was added to this advisory.

    2024-02-29: CVE-2023-39326 was added to this advisory.

    2024-02-29: CVE-2023-39325 was added to this advisory.

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-39325)

    A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response     body to read many more bytes from the network than are in the body. A malicious HTTP client can further     exploit this to cause a server to automatically read a large amount of data (up to about 1GiB) when a     handler fails to read the entire body of a request. Chunk extensions are a little-used HTTP feature which     permit including additional metadata in a request or response body sent using the chunked encoding. The     net/http chunked encoding reader discards this metadata. A sender can exploit this by inserting a large     metadata segment with each byte transferred. The chunk reader now produces an error if the ratio of real     body to encoded bytes grows too small. (CVE-2023-39326)

    A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This     vulnerability allows an attacker to perform denial of service attacks by providing specially crafted     responses from a Git server which triggers resource exhaustion in go-git clients.

    Applications using only the in-memory filesystem supported by go-git are not affected by this     vulnerability.This is a go-git implementation issue and does not affect the upstream git cli.
    (CVE-2023-49568)

    A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows     an attacker to create and amend files across the filesystem. In the worse case scenario, remote code     execution could be achieved.

    Applications are only affected if they are using the  ChrootOS https://pkg.go.dev/github.com/go-git/go-     billy/v5/osfs#ChrootOS , which is the default when using Plain versions of Open and Clone funcs (e.g.
    PlainClone). Applications using  BoundOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#BoundOS  or     in-memory filesystems are not affected by this issue.This is a go-git implementation issue and does not     affect the upstream git cli. (CVE-2023-49569)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : amazon-ssm-agent (ALAS-2024-2458)

critical Nessus Plugin ID 190697

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.2 Apr 25, 2024, 8:13 AM CVE (set "CVE" coverage to "CVE-2023-39325,CVE-2023-39326,CVE-2023-49568,CVE-2023-49569") Plugin metadata Plugin Feed: 202404250813
Version 1.1 Mar 5, 2024, 7:01 AM CVE (set "CVE" coverage to "CVE-2023-39325,CVE-2023-39326,CVE-2023-49569") Plugin metadata Plugin Feed: 202403050701