7.4 - USN-1339-1

Executive Summary

Summary
Title	QEMU vulnerability

Informations
Name	USN-1339-1	First vendor Publication	2012-01-23
Vendor	Ubuntu	Last vendor Modification	2012-01-23
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:A/AC:M/Au:S/C:C/I:C/A:C)
Cvss Base Score	7.4	Attack Range	Adjacent network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	4.4	Authentication	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS

Summary:

A remote attacker could cause QEMU to crash.

Software Description: - qemu-kvm: Machine emulator and virtualizer

Details:

Nicolae Mogoreanu discovered that QEMU did not properly verify legacy mode packets in the e1000 network driver. A remote attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

When using QEMU with libvirt or virtualization management software based on libvirt such as Eucalyptus and OpenStack, QEMU guests are individually isolated by an AppArmor profile by default in Ubuntu.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10:
qemu-kvm 0.14.1+noroms-0ubuntu6.2

Ubuntu 11.04:
qemu-kvm 0.14.0+noroms-0ubuntu4.5

Ubuntu 10.10:
qemu-kvm 0.12.5+noroms-0ubuntu7.11
qemu-kvm-extras 0.12.5+noroms-0ubuntu7.11
qemu-kvm-extras-static 0.12.5+noroms-0ubuntu7.11

Ubuntu 10.04 LTS:
qemu-kvm 0.12.3+noroms-0ubuntu9.17
qemu-kvm-extras 0.12.3+noroms-0ubuntu9.17
qemu-kvm-extras-static 0.12.3+noroms-0ubuntu9.17

After a standard system update you need to restart running virtual machines which use the e1000 network driver to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1339-1
CVE-2012-0029

Package Information:
https://launchpad.net/ubuntu/+source/qemu-kvm/0.14.1+noroms-0ubuntu6.2
https://launchpad.net/ubuntu/+source/qemu-kvm/0.14.0+noroms-0ubuntu4.5
https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.11
https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.17

Original Source

Url : http://www.ubuntu.com/usn/USN-1339-1

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14929

Oval ID:	oval:org.mitre.oval:def:14929
Title:	DSA-2396-1 qemu-kvm -- buffer underflow
Description:	Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation. This update also fixes a guest-triggerable memory corruption in VNC handling.
Family:	unix	Class:	patch
Reference(s):	DSA-2396-1 CVE-2012-0029	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	qemu-kvm
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND qemu-kvm DPKG is earlier than 0.12.5+dfsg-5+squeeze8

Definition Id: oval:org.mitre.oval:def:15011

Oval ID:	oval:org.mitre.oval:def:15011
Title:	USN-1339-1 -- QEMU vulnerability
Description:	qemu-kvm: Machine emulator and virtualizer A remote attacker could cause QEMU to crash.
Family:	unix	Class:	patch
Reference(s):	USN-1339-1 CVE-2012-0029	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 10.10	Product(s):	QEMU
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND qemu-kvm DPKG is earlier than 0.14.0+noroms-0ubuntu4.5 OR Release section Ubuntu 11.10 is installed AND Installed architecture is all AND qemu-kvm DPKG is earlier than 0.14.1+noroms-0ubuntu6.2 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND Packages section qemu-kvm DPKG is earlier than 0.12.3+noroms-0ubuntu9.17 AND qemu-kvm-extras-static DPKG is earlier than 0.12.3+noroms-0ubuntu9.17 AND qemu-kvm-extras DPKG is earlier than 0.12.3+noroms-0ubuntu9.17 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND Packages section qemu-kvm DPKG is earlier than 0.12.5+noroms-0ubuntu7.11 AND qemu-kvm-extras-static DPKG is earlier than 0.12.5+noroms-0ubuntu7.11 AND qemu-kvm-extras DPKG is earlier than 0.12.5+noroms-0ubuntu7.11

Definition Id: oval:org.mitre.oval:def:15404

Oval ID:	oval:org.mitre.oval:def:15404
Title:	DSA-2404-1 xen-qemu-dm-4.0 -- buffer overflow
Description:	Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of QEMU, which is used in the xen-qemu-dm-4.0 packages. This vulnerability might enable to malicious guest systems to crash the host system or escalate their privileges. The old stable distribution does not contain the xen-qemu-dm-4.0 package.
Family:	unix	Class:	patch
Reference(s):	DSA-2404-1 CVE-2012-0029	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	xen-qemu-dm-4.0
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND xen-qemu-dm-4.0 DPKG is earlier than 4.0.1-2+squeeze1

Definition Id: oval:org.mitre.oval:def:20784

Oval ID:	oval:org.mitre.oval:def:20784
Title:	RHSA-2012:0051: kvm security update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0051-01 CESA-2012:0051 CVE-2011-4622 CVE-2012-0029	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kvm
Definition Synopsis:
Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND Packages section kvm is earlier than 0:83-239.el5_7.1 AND kmod-kvm is earlier than 0:83-239.el5_7.1 AND kvm-tools is earlier than 0:83-239.el5_7.1 AND kmod-kvm-debug is earlier than 0:83-239.el5_7.1 AND kvm-qemu-img is earlier than 0:83-239.el5_7.1 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND Packages section kvm is earlier than 0:83-239.el5.centos.1 AND kmod-kvm is earlier than 0:83-239.el5.centos.1 AND kvm-tools is earlier than 0:83-239.el5.centos.1 AND kmod-kvm-debug is earlier than 0:83-239.el5.centos.1 AND kvm-qemu-img is earlier than 0:83-239.el5.centos.1

Definition Id: oval:org.mitre.oval:def:21188

Oval ID:	oval:org.mitre.oval:def:21188
Title:	RHSA-2012:0050: qemu-kvm security, bug fix, and enhancement update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0050-01 CESA-2012:0050 CVE-2012-0029	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	qemu-kvm
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section qemu-kvm is earlier than 2:0.12.1.2-2.209.el6_2.4 AND qemu-kvm-tools is earlier than 2:0.12.1.2-2.209.el6_2.4 AND qemu-img is earlier than 2:0.12.1.2-2.209.el6_2.4

Definition Id: oval:org.mitre.oval:def:21269

Oval ID:	oval:org.mitre.oval:def:21269
Title:	RHSA-2012:0370: xen security and bug fix update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0370-01 CVE-2012-0029	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	xen
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section xen is earlier than 0:3.0.3-135.el5_8.2 AND xen-devel is earlier than 0:3.0.3-135.el5_8.2 AND xen-libs is earlier than 0:3.0.3-135.el5_8.2

Definition Id: oval:org.mitre.oval:def:22829

Oval ID:	oval:org.mitre.oval:def:22829
Title:	ELSA-2012:0370: xen security and bug fix update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0370-01 CVE-2012-0029	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	xen
Definition Synopsis:
Oracle Linux 5.x rpm test xen is earlier than 0:3.0.3-135.el5_8.2 AND xen-devel is earlier than 0:3.0.3-135.el5_8.2 AND xen-libs is earlier than 0:3.0.3-135.el5_8.2

Definition Id: oval:org.mitre.oval:def:23102

Oval ID:	oval:org.mitre.oval:def:23102
Title:	ELSA-2012:0051: kvm security update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0051-01 CVE-2011-4622 CVE-2012-0029	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	kvm
Definition Synopsis:
Oracle Linux 5.x rpm test kvm is earlier than 0:83-239.el5_7.1 AND kmod-kvm is earlier than 0:83-239.el5_7.1 AND kvm-tools is earlier than 0:83-239.el5_7.1 AND kmod-kvm-debug is earlier than 0:83-239.el5_7.1 AND kvm-qemu-img is earlier than 0:83-239.el5_7.1

Definition Id: oval:org.mitre.oval:def:23839

Oval ID:	oval:org.mitre.oval:def:23839
Title:	ELSA-2012:0050: qemu-kvm security, bug fix, and enhancement update (Important)
Description:	Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0050-01 CVE-2012-0029	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	qemu-kvm
Definition Synopsis:
Oracle Linux 6.x rpm test qemu-kvm is earlier than 2:0.12.1.2-2.209.el6_2.4 AND qemu-kvm-tools is earlier than 2:0.12.1.2-2.209.el6_2.4 AND qemu-img is earlier than 2:0.12.1.2-2.209.el6_2.4

Definition Id: oval:org.mitre.oval:def:27871

Oval ID:	oval:org.mitre.oval:def:27871
Title:	DEPRECATED: ELSA-2012-0050 -- qemu-kvm security, bug fix, and enhancement update (important)
Description:	[qemu-kvm-0.12.1.2-2.209.el6_2.4] - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772081] - Resolves: bz#772081 (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-6.2.z]) [qemu-kvm-0.12.1.2-2.209.el6_2.3] - kvm-Revert-virtio-blk-refuse-SG_IO-requests-with-scsi-of.patch [for bz#767721] - kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off-v2.patch [bz#767721] - CVE: CVE-2011-4127 - Resolves: bz#767721 (qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off (CVE-2011-4127 mitigation) [rhel-6.2.z]) [qemu-kvm-0.12.1.2-2.209.el6_2.2] - kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off.patch [bz#752375] - CVE: CVE-2011-4127 - Resolves: bz#767721 (EMBARGOED qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off (CVE-2011-4127 mitigation) [rhel-6.3]) - Resolves: bz#767906 (qemu-kvm should be built with full relro and PIE support)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0050 CVE-2012-0029	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	qemu-kvm
Definition Synopsis:
Oracle Linux 6.x Packages match section qemu-kvm is earlier than 0:0.12.1.2-2.209.el6_2.4 AND qemu-img is earlier than 0:0.12.1.2-2.209.el6_2.4 AND qemu-kvm-tools is earlier than 0:0.12.1.2-2.209.el6_2.4

Definition Id: oval:org.mitre.oval:def:27905

Oval ID:	oval:org.mitre.oval:def:27905
Title:	DEPRECATED: ELSA-2012-0370 -- xen security and bug fix update (important)
Description:	[3.0.3-135.el5_8.2] - Fix broken timestamp log (rhbz 797836) [3.0.3-135.el5_8.1] - qemu-dm/e1000: bounds packet size against buffer size (rhbz 786862) - Use correct expansion in xen-network-common.sh (rhbz 797191)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0370 CVE-2012-0029	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	xen
Definition Synopsis:
Oracle Linux 5.x Packages match section xen is earlier than 0:3.0.3-135.el5_8.2 AND xen-devel is earlier than 0:3.0.3-135.el5_8.2 AND xen-libs is earlier than 0:3.0.3-135.el5_8.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Kvm Group Qemu-Kvm cpe:2.3:a:kvm_group:qemu-kvm:0.12:::::::*	1

OpenVAS Exploits

Date	Description
2012-12-18	Name : Fedora Update for xen FEDORA-2012-19828 File : nvt/gb_fedora_2012_19828_xen_fc16.nasl
2012-11-23	Name : Fedora Update for xen FEDORA-2012-18249 File : nvt/gb_fedora_2012_18249_xen_fc16.nasl
2012-11-15	Name : Fedora Update for xen FEDORA-2012-17408 File : nvt/gb_fedora_2012_17408_xen_fc16.nasl
2012-10-22	Name : Gentoo Security Advisory GLSA 201210-04 (ebuild) File : nvt/glsa_201210_04.nasl
2012-10-19	Name : Fedora Update for qemu FEDORA-2012-15606 File : nvt/gb_fedora_2012_15606_qemu_fc16.nasl
2012-09-22	Name : Fedora Update for xen FEDORA-2012-13443 File : nvt/gb_fedora_2012_13443_xen_fc16.nasl
2012-08-24	Name : Fedora Update for xen FEDORA-2012-11785 File : nvt/gb_fedora_2012_11785_xen_fc16.nasl
2012-08-14	Name : Fedora Update for qemu FEDORA-2012-11305 File : nvt/gb_fedora_2012_11305_qemu_fc16.nasl
2012-08-06	Name : Fedora Update for xen FEDORA-2012-11190 File : nvt/gb_fedora_2012_11190_xen_fc16.nasl
2012-07-30	Name : CentOS Update for kmod-kvm CESA-2012:0051 centos5 File : nvt/gb_CESA-2012_0051_kmod-kvm_centos5.nasl
2012-07-30	Name : CentOS Update for qemu-img CESA-2012:0050 centos6 File : nvt/gb_CESA-2012_0050_qemu-img_centos6.nasl
2012-07-09	Name : RedHat Update for qemu-kvm RHSA-2012:0050-01 File : nvt/gb_RHSA-2012_0050-01_qemu-kvm.nasl
2012-06-28	Name : Fedora Update for xen FEDORA-2012-9430 File : nvt/gb_fedora_2012_9430_xen_fc15.nasl
2012-06-28	Name : Fedora Update for xen FEDORA-2012-9399 File : nvt/gb_fedora_2012_9399_xen_fc16.nasl
2012-06-08	Name : Fedora Update for qemu FEDORA-2012-8592 File : nvt/gb_fedora_2012_8592_qemu_fc16.nasl
2012-06-08	Name : Fedora Update for qemu FEDORA-2012-8604 File : nvt/gb_fedora_2012_8604_qemu_fc15.nasl
2012-04-02	Name : Fedora Update for xen FEDORA-2012-1375 File : nvt/gb_fedora_2012_1375_xen_fc16.nasl
2012-03-09	Name : RedHat Update for xen RHSA-2012:0370-01 File : nvt/gb_RHSA-2012_0370-01_xen.nasl
2012-02-21	Name : Fedora Update for xen FEDORA-2012-1539 File : nvt/gb_fedora_2012_1539_xen_fc15.nasl
2012-02-12	Name : Debian Security Advisory DSA 2404-1 (xen-qemu-dm-4.0) File : nvt/deb_2404_1.nasl
2012-02-11	Name : Debian Security Advisory DSA 2396-1 (qemu-kvm) File : nvt/deb_2396_1.nasl
2012-01-25	Name : Ubuntu Update for qemu-kvm USN-1339-1 File : nvt/gb_ubuntu_USN_1339_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
78506	Qemu hw/e1000.c process_tx_desc() Function DMA Request Legacy Packet Packet L...

Nessus® Vulnerability Scanner

Date	Description
2015-06-12	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0068.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0168.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0109.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_qemu-120207.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_libvirt-120208.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_kvm-120124.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-84.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-404.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-243.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0050.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0051.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0370.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0050.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0051.nasl - Type : ACT_GATHER_INFO
2012-10-19	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201210-04.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120123_kvm_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120307_xen_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-08	Name : The remote Fedora host is missing a security update. File : fedora_2012-8604.nasl - Type : ACT_GATHER_INFO
2012-06-08	Name : The remote Fedora host is missing a security update. File : fedora_2012-8592.nasl - Type : ACT_GATHER_INFO
2012-03-20	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_xen-201202-120209.nasl - Type : ACT_GATHER_INFO
2012-03-20	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_xen-201202-120210.nasl - Type : ACT_GATHER_INFO
2012-03-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0370.nasl - Type : ACT_GATHER_INFO
2012-02-20	Name : The remote Fedora host is missing a security update. File : fedora_2012-1539.nasl - Type : ACT_GATHER_INFO
2012-02-20	Name : The remote Fedora host is missing a security update. File : fedora_2012-1375.nasl - Type : ACT_GATHER_INFO
2012-02-06	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2404.nasl - Type : ACT_GATHER_INFO
2012-01-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2396.nasl - Type : ACT_GATHER_INFO
2012-01-30	Name : The remote SuSE 11 host is missing a security update. File : suse_11_kvm-120116.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0050.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0051.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1339-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:59:34	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	11
CPE ID(s)	1
osvdb(s)	1
Openvas Exploit(s)	22
Nessus® Exploit(s)	30

	Related
7.4	CVE-2012-0029
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

7.4 - USN-1339-1

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU