Detections
Analytics
Scientific Linux Security Update : xfsprogs on SL7.x x86_64 (20151119)
medium Nessus Plugin ID 87579
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
It was discovered that the xfs_metadump tool of the xfsprogs suite did not fully adhere to the standards of obfuscation described in its man page. In case a user with the necessary privileges used xfs_metadump and relied on the advertised obfuscation, the generated data could contain unexpected traces of potentially sensitive information.(CVE-2012-2150)
The xfsprogs packages have been upgraded to upstream version 3.2.2, which provides a number of bug fixes and enhancements over the previous version. This release also includes updates present in upstream version 3.2.3, although it omits the mkfs.xfs default disk format change (for metadata checksumming) which is present upstream.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 87579
File Name: sl_20151119_xfsprogs_on_SL7_x.nasl
Version: 2.4
Type: local
Agent: unix
Published: 12/22/2015
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:xfsprogs-debuginfo, x-cpe:/o:fermilab:scientific_linux, p-cpe:/a:fermilab:scientific_linux:xfsprogs-devel, p-cpe:/a:fermilab:scientific_linux:xfsprogs-qa-devel, p-cpe:/a:fermilab:scientific_linux:xfsprogs
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 11/19/2015
Vulnerability Publication Date: 8/25/2015
Reference Information
CVE: CVE-2012-2150