Oracle Linux 8:virt: ol / 和 / virt-devel: rhel (ELSA-2021-3061)

medium Nessus 插件 ID 152538
全新!插件严重性现在使用 CVSS v3

计算的插件严重性默认已更新为使用 CVSS v3。没有 CVSS v3 分数的插件将回退到 CVSS v2 来计算严重性。可以在设置下拉列表中切换严重性显示首选项。

简介

远程 Oracle Linux 主机缺少一个或多个安全更新。

描述

远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2021-3061 公告中提及的多个漏洞的影响。

- 客户机 OS 用户可利用 QEMU 4.2.1 的 net/eth.c 中的 eth_get_gso_type 触发断言失败。客户机可通过缺少有效的第 3 层协议的数据包数据造成 QEMU 进程崩溃。(CVE-2020-27617)

- QEMU 4.2.0 中的 hw/pci/msix.c 允许客户机操作系统用户通过在 msi-x mmio 操作中构建地址来触发越界访问。(CVE-2020-13754)

- 在 aarch64 平台上,QEMU qemu 4.2.0 及之前版本的 ARM Generic Interrupt Controller 仿真器中发现越界堆缓冲区访问问题。出现此问题的原因在于将中断 ID 写入控制器内存区域时,并未将其屏蔽为 4 位宽。更新控制器状态字段及其后续处理时可能出现上述问题。客户机特权用户可能利用此缺陷造成主机上的 QEMU 进程崩溃,进而导致 DoS 情形。(CVE-2021-20221)

- 在 1.3.20 之前版本的 hivex 库中发现一个缺陷。造成此缺陷的原因在于,hivex_open 函数中缺少边界检查。攻击者可输入特别构建的 Windows 注册表 (hive) 文件,从而导致 hivex 读取超出正常边界的内存,或造成程序崩溃。此漏洞最大的威胁在于系统可用性。(CVE-2021-3504)

- 在 QEMU 5.2.0 及其之前版本的各种 NIC 仿真器中发现通过无限循环导致的潜在堆栈溢出问题。在 NIC 的环回模式(会绕过可重入的 DMA 检查)中会发生此问题。客户机用户/进程可能会利用此缺陷消耗 CPU 周期或造成主机上的 QEMU 进程崩溃,进而导致 DoS 情形。(CVE-2021-3416)

请注意,Nessus 尚未测试此问题,而是只依靠应用程序自我报告的版本号来判断。

解决方案

更新受影响的程序包。

另见

https://linux.oracle.com/errata/ELSA-2021-3061.html

插件详情

严重性: Medium

ID: 152538

文件名: oraclelinux_ELSA-2021-3061.nasl

版本: 1.2

类型: local

代理: unix

发布时间: 2021/8/13

最近更新时间: 2021/8/13

依存关系: ssh_get_info.nasl

风险信息

CVSS 分数来源: CVE-2021-3504

VPR

风险因素: Medium

分数: 6.7

CVSS v2

风险因素: Medium

基本分数: 5.8

时间分数: 4.3

矢量: AV:N/AC:M/Au:N/C:P/I:N/A:P

时间矢量: E:U/RL:OF/RC:C

CVSS v3

风险因素: Medium

基本分数: 5.4

时间分数: 4.7

矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

时间矢量: E:U/RL:O/RC:C

漏洞信息

CPE: cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:hivex, p-cpe:/a:oracle:linux:hivex-devel, p-cpe:/a:oracle:linux:libguestfs, p-cpe:/a:oracle:linux:libguestfs-bash-completion, p-cpe:/a:oracle:linux:libguestfs-benchmarking, p-cpe:/a:oracle:linux:libguestfs-devel, p-cpe:/a:oracle:linux:libguestfs-gfs2, p-cpe:/a:oracle:linux:libguestfs-gobject, p-cpe:/a:oracle:linux:libguestfs-gobject-devel, p-cpe:/a:oracle:linux:libguestfs-inspect-icons, p-cpe:/a:oracle:linux:libguestfs-java, p-cpe:/a:oracle:linux:libguestfs-java-devel, p-cpe:/a:oracle:linux:libguestfs-javadoc, p-cpe:/a:oracle:linux:libguestfs-man-pages-ja, p-cpe:/a:oracle:linux:libguestfs-man-pages-uk, p-cpe:/a:oracle:linux:libguestfs-rescue, p-cpe:/a:oracle:linux:libguestfs-rsync, p-cpe:/a:oracle:linux:libguestfs-tools, p-cpe:/a:oracle:linux:libguestfs-tools-c, p-cpe:/a:oracle:linux:libguestfs-winsupport, p-cpe:/a:oracle:linux:libguestfs-xfs, p-cpe:/a:oracle:linux:libiscsi, p-cpe:/a:oracle:linux:libiscsi-devel, p-cpe:/a:oracle:linux:libiscsi-utils, p-cpe:/a:oracle:linux:libnbd, p-cpe:/a:oracle:linux:libnbd-devel, p-cpe:/a:oracle:linux:libvirt, p-cpe:/a:oracle:linux:libvirt-admin, p-cpe:/a:oracle:linux:libvirt-bash-completion, p-cpe:/a:oracle:linux:libvirt-client, p-cpe:/a:oracle:linux:libvirt-daemon, p-cpe:/a:oracle:linux:libvirt-daemon-config-network, p-cpe:/a:oracle:linux:libvirt-daemon-config-nwfilter, p-cpe:/a:oracle:linux:libvirt-daemon-driver-interface, p-cpe:/a:oracle:linux:libvirt-daemon-driver-network, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nodedev, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nwfilter, p-cpe:/a:oracle:linux:libvirt-daemon-driver-qemu, p-cpe:/a:oracle:linux:libvirt-daemon-driver-secret, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-core, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-disk, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-gluster, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-iscsi, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-iscsi-direct, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-logical, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-mpath, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-rbd, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-scsi, p-cpe:/a:oracle:linux:libvirt-daemon-kvm, p-cpe:/a:oracle:linux:libvirt-dbus, p-cpe:/a:oracle:linux:libvirt-devel, p-cpe:/a:oracle:linux:libvirt-docs, p-cpe:/a:oracle:linux:libvirt-libs, p-cpe:/a:oracle:linux:libvirt-lock-sanlock, p-cpe:/a:oracle:linux:libvirt-nss, p-cpe:/a:oracle:linux:lua-guestfs, p-cpe:/a:oracle:linux:nbdfuse, p-cpe:/a:oracle:linux:nbdkit, p-cpe:/a:oracle:linux:nbdkit-bash-completion, p-cpe:/a:oracle:linux:nbdkit-basic-filters, p-cpe:/a:oracle:linux:nbdkit-basic-plugins, p-cpe:/a:oracle:linux:nbdkit-curl-plugin, p-cpe:/a:oracle:linux:nbdkit-devel, p-cpe:/a:oracle:linux:nbdkit-example-plugins, p-cpe:/a:oracle:linux:nbdkit-gzip-plugin, p-cpe:/a:oracle:linux:nbdkit-linuxdisk-plugin, p-cpe:/a:oracle:linux:nbdkit-python-plugin, p-cpe:/a:oracle:linux:nbdkit-server, p-cpe:/a:oracle:linux:nbdkit-ssh-plugin, p-cpe:/a:oracle:linux:nbdkit-vddk-plugin, p-cpe:/a:oracle:linux:nbdkit-xz-filter, p-cpe:/a:oracle:linux:netcf, p-cpe:/a:oracle:linux:netcf-devel, p-cpe:/a:oracle:linux:netcf-libs, p-cpe:/a:oracle:linux:ocaml-hivex, p-cpe:/a:oracle:linux:ocaml-hivex-devel, p-cpe:/a:oracle:linux:ocaml-libguestfs, p-cpe:/a:oracle:linux:ocaml-libguestfs-devel, p-cpe:/a:oracle:linux:ocaml-libnbd, p-cpe:/a:oracle:linux:ocaml-libnbd-devel, p-cpe:/a:oracle:linux:perl-Sys-Guestfs, p-cpe:/a:oracle:linux:perl-Sys-Virt, p-cpe:/a:oracle:linux:perl-hivex, p-cpe:/a:oracle:linux:python3-hivex, p-cpe:/a:oracle:linux:python3-libguestfs, p-cpe:/a:oracle:linux:python3-libnbd, p-cpe:/a:oracle:linux:python3-libvirt, p-cpe:/a:oracle:linux:qemu-guest-agent, p-cpe:/a:oracle:linux:qemu-img, p-cpe:/a:oracle:linux:qemu-kvm, p-cpe:/a:oracle:linux:qemu-kvm-block-curl, p-cpe:/a:oracle:linux:qemu-kvm-block-gluster, p-cpe:/a:oracle:linux:qemu-kvm-block-iscsi, p-cpe:/a:oracle:linux:qemu-kvm-block-rbd, p-cpe:/a:oracle:linux:qemu-kvm-block-ssh, p-cpe:/a:oracle:linux:qemu-kvm-common, p-cpe:/a:oracle:linux:qemu-kvm-core, p-cpe:/a:oracle:linux:qemu-kvm-tests, p-cpe:/a:oracle:linux:ruby-hivex, p-cpe:/a:oracle:linux:ruby-libguestfs, p-cpe:/a:oracle:linux:seabios, p-cpe:/a:oracle:linux:seabios-bin, p-cpe:/a:oracle:linux:seavgabios-bin, p-cpe:/a:oracle:linux:sgabios, p-cpe:/a:oracle:linux:sgabios-bin, p-cpe:/a:oracle:linux:supermin, p-cpe:/a:oracle:linux:supermin-devel, p-cpe:/a:oracle:linux:virt-dib, p-cpe:/a:oracle:linux:virt-v2v

必需的 KB 项: Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list, Host/local_checks_enabled

易利用性: No known exploits are available

补丁发布日期: 2021/8/12

漏洞发布日期: 2020/6/2

参考资料信息

CVE: CVE-2020-13754, CVE-2020-27617, CVE-2021-3416, CVE-2021-3504, CVE-2021-20221

IAVB: 2020-B-0041-S, 2020-B-0063-S