An update of the systemd package has been released.

The remote NewStart CGSL host, running version MAIN 6.02, has NetworkManager packages installed that are affected by a vulnerability:

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4361 advisory.

  - systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have     its network reconfigured (CVE-2020-13529)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4361 advisory.

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202107-48 (systemd: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in systemd. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW     packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An     attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. (CVE-2020-13529)

  - basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an     Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that     results in an operating system crash. (CVE-2021-33910)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5013-2 advisory.

    USN-5013-1 fixed several vulnerabilities in systemd. This update provides the corresponding update for     Ubuntu 16.04 ESM.

    Original advisory details:

    It was discovered that systemd incorrectly handled certain mount paths. A

    local attacker could possibly use this issue to cause systemd to crash,

    resulting in a denial of service. (CVE-2021-33910)

    Mitchell Frank discovered that systemd incorrectly handled DHCP FORCERENEW

    packets. A remote attacker could possibly use this issue to reconfigure

    servers. (CVE-2020-13529)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
152051	Photon OS 1.0: Systemd PHSA-2021-1.0-0416	Nessus	PhotonOS Local Security Checks	2021/7/23	2023/12/6	medium
160819	NewStart CGSL MAIN 6.02 : NetworkManager Vulnerability (NS-SA-2022-0072)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2023/12/19	medium
156350	EulerOS Virtualization 3.0.2.0 : NetworkManager (EulerOS-SA-2021-2821)	Nessus	Huawei Local Security Checks	2021/12/29	2023/11/21	medium
156365	EulerOS Virtualization 3.0.2.0 : systemd (EulerOS-SA-2021-2824)	Nessus	Huawei Local Security Checks	2021/12/29	2023/11/21	medium
155343	CentOS 8 : NetworkManager (CESA-2021:4361)	Nessus	CentOS Local Security Checks	2021/11/13	2023/11/23	medium
155424	Oracle Linux 8 : NetworkManager (ELSA-2021-4361)	Nessus	Oracle Linux Local Security Checks	2021/11/17	2023/11/23	medium
157025	GLSA-202107-48 : systemd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2022/1/24	2024/1/16	medium
157988	EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2022-1098)	Nessus	Huawei Local Security Checks	2022/2/12	2022/5/6	medium
151835	Ubuntu 16.04 ESM : systemd vulnerabilities (USN-5013-2)	Nessus	Ubuntu Local Security Checks	2021/7/20	2024/8/27	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium