Oracle Linux 8：GNOME (ELSA-2021-1586)

high Nessus 插件 ID 149947

语言：

简介

远程 Oracle Linux 主机缺少一个或多个安全更新。

描述

远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2021-1586 公告中提及的多个漏洞的影响。

- Webkit WebKitGTK 2.30.0 的 WebSocket 功能中存在一个代码执行漏洞。特别构建的网页可触发释放后使用漏洞，而该漏洞可导致远程代码执行。攻击者可让用户访问网页来触发此漏洞。(CVE-2020-13543)

- WebKitGTK 浏览器版本 2.30.1 x64 中存在可利用的释放后使用漏洞。特别构建的 HTML 网页可导致释放后使用情况，从而导致远程代码执行。受害者需要访问恶意网站以触发此漏洞。(CVE-2020-13584)

- 在 2.60.0 之前的 GNOME GLib（也称为 glib2.0）中，密钥文件设置后端使用 g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) 创建目录，并使用 g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL) 创建文件。
因此，该后端无法正确限制目录（和文件）权限。相反，对于目录，后端会使用 0777 权限；对于文件，则使用默认的文件权限。此问题类似于 CVE-2019-12450。(CVE-2019-13012)

- 已通过改进的内存处理解决类型混淆问题。此问题已在 Safari 14.0 中修复。
- 处理恶意构建的 Web 内容可能会导致任意代码执行。(CVE-2020-9948)

- 已通过改进的内存管理解决释放后使用问题。此问题已在 Safari 14.0 中修复。
- 处理恶意构建的 Web 内容可能会导致任意代码执行。(CVE-2020-9951)

- 已通过改进的边界检查解决越界写入问题。此问题已在 Safari 14.0 中修复。处理恶意构建的 Web 内容可能会导致代码执行。(CVE-2020-9983)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

解决方案

更新受影响的程序包。

另见

https://linux.oracle.com/errata/ELSA-2021-1586.html

插件详情

严重性: High

ID: 149947

文件名: oraclelinux_ELSA-2021-1586.nasl

版本: 1.3

类型: local

代理: unix

系列: Oracle Linux Local Security Checks

发布时间: 2021/5/26

最近更新时间: 2023/12/28

支持的传感器: Frictionless Assessment Agent, Nessus Agent, Nessus

风险信息

VPR

风险因素: Medium

分数: 6.7

CVSS v2

风险因素: Medium

基本分数: 6.8

时间分数: 5.3

矢量: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS 分数来源: CVE-2020-9983

CVSS v3

风险因素: High

基本分数: 8.8

时间分数: 7.9

矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

时间矢量: CVSS:3.0/E:P/RL:O/RC:C

漏洞信息

CPE: cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:openexr-devel, p-cpe:/a:oracle:linux:openexr-libs, p-cpe:/a:oracle:linux:accountsservice, p-cpe:/a:oracle:linux:accountsservice-devel, p-cpe:/a:oracle:linux:accountsservice-libs, p-cpe:/a:oracle:linux:atkmm, p-cpe:/a:oracle:linux:atkmm-devel, p-cpe:/a:oracle:linux:atkmm-doc, p-cpe:/a:oracle:linux:cairomm, p-cpe:/a:oracle:linux:cairomm-devel, p-cpe:/a:oracle:linux:cairomm-doc, p-cpe:/a:oracle:linux:chrome-gnome-shell, p-cpe:/a:oracle:linux:dleyna-core, p-cpe:/a:oracle:linux:dleyna-server, p-cpe:/a:oracle:linux:enchant2, p-cpe:/a:oracle:linux:enchant2-devel, p-cpe:/a:oracle:linux:gamin, p-cpe:/a:oracle:linux:gamin-devel, p-cpe:/a:oracle:linux:gdm, p-cpe:/a:oracle:linux:geoclue2, p-cpe:/a:oracle:linux:geoclue2-demos, p-cpe:/a:oracle:linux:geoclue2-devel, p-cpe:/a:oracle:linux:geoclue2-libs, p-cpe:/a:oracle:linux:geocode-glib, p-cpe:/a:oracle:linux:geocode-glib-devel, p-cpe:/a:oracle:linux:gjs, p-cpe:/a:oracle:linux:gjs-devel, p-cpe:/a:oracle:linux:glib2, p-cpe:/a:oracle:linux:glib2-devel, p-cpe:/a:oracle:linux:glib2-doc, p-cpe:/a:oracle:linux:glib2-fam, p-cpe:/a:oracle:linux:glib2-static, p-cpe:/a:oracle:linux:glib2-tests, p-cpe:/a:oracle:linux:glibmm24, p-cpe:/a:oracle:linux:glibmm24-devel, p-cpe:/a:oracle:linux:glibmm24-doc, p-cpe:/a:oracle:linux:gnome-boxes, p-cpe:/a:oracle:linux:gnome-classic-session, p-cpe:/a:oracle:linux:gnome-control-center, p-cpe:/a:oracle:linux:gnome-control-center-filesystem, p-cpe:/a:oracle:linux:gnome-online-accounts, p-cpe:/a:oracle:linux:gnome-online-accounts-devel, p-cpe:/a:oracle:linux:gnome-photos, p-cpe:/a:oracle:linux:gnome-photos-tests, p-cpe:/a:oracle:linux:gnome-settings-daemon, p-cpe:/a:oracle:linux:gnome-shell, p-cpe:/a:oracle:linux:gnome-shell-extension-apps-menu, p-cpe:/a:oracle:linux:gnome-shell-extension-auto-move-windows, p-cpe:/a:oracle:linux:gnome-shell-extension-common, p-cpe:/a:oracle:linux:gnome-shell-extension-dash-to-dock, p-cpe:/a:oracle:linux:gnome-shell-extension-desktop-icons, p-cpe:/a:oracle:linux:gnome-shell-extension-disable-screenshield, p-cpe:/a:oracle:linux:gnome-shell-extension-drive-menu, p-cpe:/a:oracle:linux:gnome-shell-extension-horizontal-workspaces, p-cpe:/a:oracle:linux:gnome-shell-extension-launch-new-instance, p-cpe:/a:oracle:linux:gnome-shell-extension-native-window-placement, p-cpe:/a:oracle:linux:gnome-shell-extension-no-hot-corner, p-cpe:/a:oracle:linux:gnome-shell-extension-panel-favorites, p-cpe:/a:oracle:linux:gnome-shell-extension-places-menu, p-cpe:/a:oracle:linux:gnome-shell-extension-screenshot-window-sizer, p-cpe:/a:oracle:linux:gnome-shell-extension-systemmonitor, p-cpe:/a:oracle:linux:gnome-shell-extension-top-icons, p-cpe:/a:oracle:linux:gnome-shell-extension-updates-dialog, p-cpe:/a:oracle:linux:gnome-shell-extension-user-theme, p-cpe:/a:oracle:linux:gnome-shell-extension-window-grouper, p-cpe:/a:oracle:linux:gnome-shell-extension-window-list, p-cpe:/a:oracle:linux:gnome-shell-extension-windowsnavigator, p-cpe:/a:oracle:linux:gnome-shell-extension-workspace-indicator, p-cpe:/a:oracle:linux:gnome-software, p-cpe:/a:oracle:linux:gnome-terminal, p-cpe:/a:oracle:linux:gnome-terminal-nautilus, p-cpe:/a:oracle:linux:gtk-doc, p-cpe:/a:oracle:linux:gtk2, p-cpe:/a:oracle:linux:gtk2-devel, p-cpe:/a:oracle:linux:gtk2-devel-docs, p-cpe:/a:oracle:linux:gtk2-immodule-xim, p-cpe:/a:oracle:linux:gtk2-immodules, p-cpe:/a:oracle:linux:gtkmm24, p-cpe:/a:oracle:linux:gtkmm24-devel, p-cpe:/a:oracle:linux:gtkmm24-docs, p-cpe:/a:oracle:linux:gtkmm30, p-cpe:/a:oracle:linux:gtkmm30-devel, p-cpe:/a:oracle:linux:gtkmm30-doc, p-cpe:/a:oracle:linux:gvfs, p-cpe:/a:oracle:linux:gvfs-afc, p-cpe:/a:oracle:linux:gvfs-afp, p-cpe:/a:oracle:linux:gvfs-archive, p-cpe:/a:oracle:linux:gvfs-client, p-cpe:/a:oracle:linux:gvfs-devel, p-cpe:/a:oracle:linux:gvfs-fuse, p-cpe:/a:oracle:linux:gvfs-goa, p-cpe:/a:oracle:linux:gvfs-gphoto2, p-cpe:/a:oracle:linux:gvfs-mtp, p-cpe:/a:oracle:linux:gvfs-smb, p-cpe:/a:oracle:linux:libdazzle, p-cpe:/a:oracle:linux:libdazzle-devel, p-cpe:/a:oracle:linux:libepubgen, p-cpe:/a:oracle:linux:libepubgen-devel, p-cpe:/a:oracle:linux:libsass, p-cpe:/a:oracle:linux:libsass-devel, p-cpe:/a:oracle:linux:libsigc%2b%2b20, p-cpe:/a:oracle:linux:libsigc%2b%2b20-devel, p-cpe:/a:oracle:linux:libsigc%2b%2b20-doc, p-cpe:/a:oracle:linux:libvisual, p-cpe:/a:oracle:linux:libvisual-devel, p-cpe:/a:oracle:linux:mutter, p-cpe:/a:oracle:linux:mutter-devel, p-cpe:/a:oracle:linux:nautilus, p-cpe:/a:oracle:linux:nautilus-devel, p-cpe:/a:oracle:linux:pangomm-doc, p-cpe:/a:oracle:linux:soundtouch, p-cpe:/a:oracle:linux:soundtouch-devel, p-cpe:/a:oracle:linux:vala, p-cpe:/a:oracle:linux:woff2, p-cpe:/a:oracle:linux:woff2-devel, p-cpe:/a:oracle:linux:nautilus-extensions, p-cpe:/a:oracle:linux:pangomm, p-cpe:/a:oracle:linux:pangomm-devel, p-cpe:/a:oracle:linux:vala-devel, p-cpe:/a:oracle:linux:webkit2gtk3, p-cpe:/a:oracle:linux:webkit2gtk3-devel, p-cpe:/a:oracle:linux:webkit2gtk3-jsc, p-cpe:/a:oracle:linux:webkit2gtk3-jsc-devel

必需的 KB 项: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux

可利用: true

易利用性: Exploits are available

补丁发布日期: 2021/5/25

漏洞发布日期: 2019/6/28

参考资料信息

CVE: CVE-2019-13012, CVE-2020-13543, CVE-2020-13584, CVE-2020-9948, CVE-2020-9951, CVE-2020-9983