Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-603)

high Nessus Plugin ID 194486

Version 1.8

Dec 23, 2024, 9:17 AM

  • CVSS metrics ("CVSSv2 score" set to 6.8)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C")
  • CVSS metrics ("CVSSv3 score" set to 7.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv2 score source (changed from "CVE-2024-26659" to "CVE-2024-26793")
  • CVSSv3 score source (changed from "CVE-2024-26789" to none)

Plugin Feed: 202412230917

Version 1.7

Dec 12, 2024, 9:55 AM

  • CVSS metrics ("CVSSv2 score" set to 6.0)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C")
  • CVSS metrics ("Cvssv4 score" set to 0.0)
  • CVSSv2 severity (based on CVE-2024-26659, severity decreased from "High" to "Medium")
  • CVSSv2 severity (based on None, severity decreased from "High" to "Low")
  • Detection (updated detection logic)

Plugin Feed: 202412120955

Version 1.6

Nov 4, 2024, 10:01 AM

  • CVSS metrics ("CVSSv3 score" set to 7.1)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H")
  • CVSSv3 score source (changed from "CVE-2024-27431" to "CVE-2024-26789")
  • CVSSv3 severity (based on CVE-2024-26789, severity increased from "Medium" to "High")

Plugin Feed: 202411041001

Version 1.5

Sep 13, 2024, 3:37 PM

  • CVE (set "CVE" coverage to "CVE-2023-52620,CVE-2023-52641,CVE-2024-1627,CVE-2024-26621,CVE-2024-26659,CVE-2024-26686,CVE-2024-26735,CVE-2024-26741,CVE-2024-26742,CVE-2024-26760,CVE-2024-26763,CVE-2024-26764,CVE-2024-26772,CVE-2024-26773,CVE-2024-26774,CVE-2024-26780,CVE-2024-26782,CVE-2024-26789,CVE-2024-26791,CVE-2024-26792,CVE-2024-26793,CVE-2024-26798,CVE-2024-26803,CVE-2024-26804,CVE-2024-26805,CVE-2024-26832,CVE-2024-26835,CVE-2024-26840,CVE-2024-26844,CVE-2024-26845,CVE-2024-26849,CVE-2024-26851,CVE-2024-26857,CVE-2024-27023,CVE-2024-27024,CVE-2024-27404,CVE-2024-27413,CVE-2024-27415,CVE-2024-27417,CVE-2024-27431")
  • CVSS metrics ("CVSSv2 score" set to 10.0)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C")
  • CVSS metrics ("CVSSv3 score" set to 5.5)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H")
  • CVSS metrics ("Cvssv4 score" set to 0.0)
  • CVSSv2 severity (based on CVE-2024-26659, severity increased from "Medium" to "High")
  • CVSSv2 severity (based on None, severity decreased from "High" to "Low")
  • CVSSv3 score source (set to "CVE-2024-27431")
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202409131537

Version 1.4

Aug 16, 2024, 10:27 AM

  • CVE (set "CVE" coverage to "CVE-2023-52620,CVE-2023-52641,CVE-2024-1627,CVE-2024-26621,CVE-2024-26659,CVE-2024-26686,CVE-2024-26735,CVE-2024-26741,CVE-2024-26742,CVE-2024-26760,CVE-2024-26763,CVE-2024-26764,CVE-2024-26772,CVE-2024-26773,CVE-2024-26774,CVE-2024-26780,CVE-2024-26782,CVE-2024-26789,CVE-2024-26791,CVE-2024-26792,CVE-2024-26793,CVE-2024-26798,CVE-2024-26803,CVE-2024-26804,CVE-2024-26805,CVE-2024-26832,CVE-2024-26835,CVE-2024-26840,CVE-2024-26844,CVE-2024-26845,CVE-2024-26849,CVE-2024-26851,CVE-2024-26857,CVE-2024-27023,CVE-2024-27024,CVE-2024-27417")
  • CVSS metrics ("CVSSv2 score" set to 5.9)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:M/C:C/I:N/A:C")
  • CVSS metrics ("CVSSv3 score" set to 6.0)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H")
  • CVSSv2 score source (changed from "CVE-2024-27417" to "CVE-2024-26659")
  • CVSSv3 score source (changed from "CVE-2023-52620" to none)
  • CVSSv3 severity (based on None, severity increased from "Low" to "Medium")
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202408161027

Version 1.3

Jul 5, 2024, 2:41 PM

  • CVE (set "CVE" coverage to "CVE-2023-52620,CVE-2024-1627,CVE-2024-26621,CVE-2024-26782,CVE-2024-27417")
  • CVSS metrics ("CVSSv2 score" set to 4.6)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C")
  • CVSS metrics ("CVSSv3 score" set to 2.5)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L")
  • CVSSv2 severity (based on CVE-2024-27417, severity decreased from "High" to "Medium")
  • CVSSv3 score source (set to "CVE-2023-52620")
  • CVSSv3 severity (based on CVE-2023-52620, severity decreased from "High" to "Low")
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202407051441

Version 1.2

Jun 8, 2024, 3:36 AM

  • CVE (set "CVE" coverage to "CVE-2024-1627,CVE-2024-26621,CVE-2024-26782,CVE-2024-27417")
  • CVSS metrics ("CVSSv2 score" set to 7.2)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C")
  • CVSS metrics ("CVSSv3 score" set to 7.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv2 score source (changed from "CVE-2024-1627" to "CVE-2024-27417")
  • CVSSv3 score source (changed from "CVE-2024-26782" to none)
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202406080336

Version 1.1

May 24, 2024, 4:00 AM

  • CVE (set "CVE" coverage to "CVE-2024-1627,CVE-2024-26782")
  • CVSS metrics ("CVSSv2 score" set to 7.5)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P")
  • CVSSv3 score source (set to "CVE-2024-26782")
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202405240400

Version 1.0

Apr 30, 2024, 4:27 AM

  • New

Plugin Feed: 202404300427

* Changelogs are generally available for changes made after Nov 1, 2022