远程主机受到 GLSA-202008-06 中所述漏洞的影响（iproute2：拒绝服务）

    已发现 iproute2 内 ip/ipnetns.c 的 get_netnsid_from_name 中存在释放后使用。
  影响：

    如果远程攻击者能够提供 iproute2 构建的数据，则可能造成拒绝服务情况。
  变通方案：

    目前无任何已知的变通方案。

據發現，IPRoute 未正確處理某些輸入。攻擊者可能利用此問題執行任意程式碼。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已嘗試在不造成其他問題的前提下，盡可能完成自動清理並將其格式化。

发现 IPRoute 未能正确处理某些输入。攻击者可能利用此问题执行任意代码。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动清理和排版。

遠端主機受到 GLSA-202008-06 中所述的弱點影響 (iproute2：拒絕服務)

    據發現，iproute2 在 ip/ipnetns.c 的 get_netnsid_from_name 中有一個釋放後使用問題。
  影響：

    遠端攻擊者能夠提供 iproute2 特製資料，進而可能會造成拒絕服務情形。
  因應措施：

    目前尚無已知的因應措施。

IPRouteが特定の入力を誤って処理することがわかりました。攻撃者がこの問題を悪用して、任意のコードを実行する可能性があります。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートの SUSE Linux SLED12 / SLES12 / SLES_SAP12 ホストには、SUSE-SU-2021:3452-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - 5.1.0 より前の iproute2 は、ip/ipnetns.c の get_netnsid_from_name にメモリ解放後使用 (Use After Free) があります。注意: セキュリティの関連性は setuid の特定の使用に限定される場合があります。これは、デフォルトではありませんが、エンドユーザーに提供される構成オプションである場合があります。setuid が使用される場合でも、他の要素 (C ライブラリの構成など) が悪用を阻止する可能性があります。(CVE-2019-20795)

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3452-1 advisory.

  - iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security     relevance may be limited to certain uses of setuid that, although not a default, are sometimes a     configuration option offered to end users. Even when setuid is used, other factors (such as C library     configuration) may block exploitability. (CVE-2019-20795)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that IPRoute incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202008-06 (iproute2: Denial of service)

    iproute2 was found to contain a use-after-free in get_netnsid_from_name       in ip/ipnetns.c.
  Impact :

    A remote attacker, able to feed iproute2 crafted data, may be able to       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the iproute package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security     relevance may be limited to certain uses of setuid that, although not a default, are sometimes a     configuration option offered to end users. Even when setuid is used, other factors (such as C library     configuration) may block exploitability. (CVE-2019-20795)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the iproute2 package has been released.

According to the versions of the iproute package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security     relevance may be limited to certain uses of setuid that, although not a default, are sometimes a     configuration option offered to end users. Even when setuid is used, other factors (such as C library     configuration) may block exploitability. (CVE-2019-20795)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
139441	GLSA-202008-06 : iproute2：拒绝服务	Nessus	Gentoo Local Security Checks	2020/8/10	2020/9/24	medium
136606	Ubuntu 18.04 LTS：IPRoute 弱點 (USN-4357-1)	Nessus	Ubuntu Local Security Checks	2020/5/14	2023/10/20	medium
136606	Ubuntu 18.04 LTS：IPRoute 漏洞 (USN-4357-1)	Nessus	Ubuntu Local Security Checks	2020/5/14	2023/10/20	medium
139441	GLSA-202008-06 : iproute2: 拒絕服務	Nessus	Gentoo Local Security Checks	2020/8/10	2020/9/24	medium
136606	Ubuntu 18.04 LTS : IPRouteの脆弱性 (USN-4357-1)	Nessus	Ubuntu Local Security Checks	2020/5/14	2023/10/20	medium
154217	SUSE SLED12 / SLES12セキュリティ更新プログラム：iproute2 (SUSE-SU-2021:3452-1)	Nessus	SuSE Local Security Checks	2021/10/19	2023/7/13	medium
154217	SUSE SLED12 / SLES12 Security Update : iproute2 (SUSE-SU-2021:3452-1)	Nessus	SuSE Local Security Checks	2021/10/19	2023/7/13	medium
136606	Ubuntu 18.04 LTS : IPRoute vulnerability (USN-4357-1)	Nessus	Ubuntu Local Security Checks	2020/5/14	2023/10/20	medium
139441	GLSA-202008-06 : iproute2: Denial of service	Nessus	Gentoo Local Security Checks	2020/8/10	2020/9/24	medium
165913	EulerOS Virtualization 3.0.6.6 : iproute (EulerOS-SA-2022-2507)	Nessus	Huawei Local Security Checks	2022/10/9	2022/10/9	medium
136698	Photon OS 3.0: Iproute2 PHSA-2020-3.0-0091	Nessus	PhotonOS Local Security Checks	2020/5/18	2020/9/11	medium
159086	EulerOS 2.0 SP5 : iproute (EulerOS-SA-2022-1327)	Nessus	Huawei Local Security Checks	2022/3/21	2022/3/21	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium