Detections
Analytics
ESXi 5.5 < Build 1980513 glibc Library Multiple Vulnerabilities (remote check)
medium Nessus Plugin ID 78108
Language:
Synopsis
The remote VMware ESXi 5.5 host is affected by multiple vulnerabilities.Description
The remote VMware ESXi host is version 5.5 prior to build 1980513. It is, therefore, affected by the following vulnerabilities in the glibc library :- A buffer overflow flaw exists in the 'extend_buffers' function of the 'posix/regexec.c' file, due to not properly validating user input. Using a specially crafted expression, a remote attacker can cause a denial of service. (CVE-2013-0242)
- A buffer overflow flaw exists in the 'getaddrinfo' function of the '/sysdeps/posix/getaddrinfo.c' file, due to not properly validating user input. A remote attacker can cause a denial of service by triggering a large number of domain conversions. (CVE-2013-1914)
Solution
Apply patch ESXi550-201409101-SG for ESXi 5.5.See Also
http://lists.vmware.com/pipermail/security-announce/2014/000260.html
Plugin Details
Severity: Medium
ID: 78108
File Name: vmware_esxi_5_5_build_2068190_remote.nasl
Version: 1.6
Type: remote
Family: Misc.
Published: 10/9/2014
Updated: 8/6/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/o:vmware:esxi
Required KB Items: Host/VMware/release, Host/VMware/version
Exploit Ease: No known exploits are available
Patch Publication Date: 9/9/2014
Vulnerability Publication Date: 1/29/2013
Reference Information
CVE: CVE-2013-0242, CVE-2013-1914
VMSA: 2014-0008