The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:3486 advisory.

    The gdisk packages provide the gdisk partitioning utility for GUID Partition     Table (GPT) disks. The utility features a command-line interface similar to     fdisk, direct manipulation of partition table structures, recovery tools to deal     with corrupt partition tables, and the ability to convert Master Boot Record     (MBR) disks to the GPT format.

    Security Fix(es):

    * gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc     (CVE-2020-0256)

    * gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc     (CVE-2021-0308)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : gdisk (RHSA-2024:3486)

medium Nessus Plugin ID 198112

Version 1.1