Vulnerabilities > CVE-2019-14818 - Memory Leak vulnerability in multiple products

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Debian Security Advisory DSA-4567. The text 
# itself is copyright (C) Software in the Public Interest, Inc.
#

include("compat.inc");

if (description)
{
  script_id(130985);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/12");

  script_cve_id("CVE-2019-14818");
  script_xref(name:"DSA", value:"4567");

  script_name(english:"Debian DSA-4567-1 : dpdk - security update");
  script_summary(english:"Checks dpkg output for the updated package");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Debian host is missing a security-related update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"It was discovered that the vhost PMD in DPDK, a set of libraries for
fast packet processing, was affected by memory and file descriptor
leaks which could result in denial of service."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://security-tracker.debian.org/tracker/source-package/dpdk"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://packages.debian.org/source/stretch/dpdk"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://packages.debian.org/source/buster/dpdk"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.debian.org/security/2019/dsa-4567"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Upgrade the dpdk packages.

For the oldstable distribution (stretch), this problem has been fixed
in version 16.11.9-1+deb9u2.

For the stable distribution (buster), this problem has been fixed in
version 18.11.2-2+deb10u2."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:dpdk");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/11/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Debian Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("debian_package.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (deb_check(release:"10.0", prefix:"dpdk", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"dpdk-dev", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"dpdk-doc", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"dpdk-igb-uio-dkms", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"dpdk-rte-kni-dkms", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"libdpdk-dev", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-acl18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bbdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bitratestats18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bpf18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-dpaa18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-fslmc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-ifpga18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-pci18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-vdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-bus-vmbus18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-cfgfile18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-cmdline18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-common-cpt18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-common-dpaax18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-common-octeontx18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-compressdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-cryptodev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-distributor18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-eal18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-efd18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-ethdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-eventdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-flow-classify18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-gro18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-gso18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-hash18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-ip-frag18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-jobstats18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-kni18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-kvargs18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-latencystats18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-lpm18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mbuf18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-member18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-bucket18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-dpaa18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-dpaa2-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-octeontx18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-ring18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool-stack18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-mempool18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-meter18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-metrics18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-net18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pci18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pdump18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pipeline18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-aesni-gcm18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-aesni-mb18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-af-packet18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ark18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-atlantic18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-avf18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-avp18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-axgbe18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-bbdev-null18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-bnx2x18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-bnxt18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-bond18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-caam-jr18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ccp18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-crypto-scheduler18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-cxgbe18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa-sec18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa2-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa2-cmdif18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa2-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa2-qdma18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dpaa2-sec18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-dsw-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-e1000-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ena18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-enetc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-enic18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-failsafe18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-fm10k18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-i40e18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ifc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ifpga-rawdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ixgbe18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-kni18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-liquidio18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-mlx4-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-mlx5-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-netvsc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-nfp18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-null-crypto18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-null18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-octeontx-compress18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-octeontx-crypto18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-octeontx-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-octeontx18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-opdl-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-openssl18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-pcap18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-qat18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-qede18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-ring18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-sfc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-skeleton-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-skeleton-rawdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-softnic18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-sw-event18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-tap18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-thunderx18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-vdev-netvsc18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-vhost18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-virtio-crypto18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-virtio18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-vmxnet3-18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-pmd-zlib18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-port18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-power18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-rawdev18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-reorder18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-ring18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-sched18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-security18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-table18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-telemetry18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-timer18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"10.0", prefix:"librte-vhost18.11", reference:"18.11.2-2+deb10u2")) flag++;
if (deb_check(release:"9.0", prefix:"dpdk", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"dpdk-dev", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"dpdk-doc", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"dpdk-igb-uio-dkms", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"dpdk-rte-kni-dkms", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"libdpdk-dev", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"libethdev4", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-acl2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-cfgfile2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-cmdline2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-cryptodev1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-cryptodev2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-distributor1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-eal2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-eal3", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-ethdev5", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-hash2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-ip-frag1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-jobstats1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-kni2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-kvargs1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-lpm2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-mbuf2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-mempool2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-meter1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-net1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pdump1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pipeline3", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-af-packet1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-bnxt1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-bond1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-cxgbe1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-e1000-1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-ena1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-enic1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-fm10k1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-i40e1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-ixgbe1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-null-crypto1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-null1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-pcap1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-qede1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-ring2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-vhost1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-virtio1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-vmxnet3-uio1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-pmd-xenvirt1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-port3", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-power1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-reorder1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-ring1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-sched1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-table2", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-timer1", reference:"16.11.9-1+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"librte-vhost3", reference:"16.11.9-1+deb9u2")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());
  else security_warning(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Red Hat Security Advisory RHSA-2020:0172. The text 
# itself is copyright (C) Red Hat, Inc.
#

include("compat.inc");

if (description)
{
  script_id(133161);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/24");

  script_cve_id("CVE-2019-14818");
  script_xref(name:"RHSA", value:"2020:0172");

  script_name(english:"RHEL 8 : openvswitch2.12 (RHSA-2020:0172)");
  script_summary(english:"Checks the rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Red Hat host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"An update for openvswitch2.12 is now available for Fast Datapath for
RHEL 8.

Red Hat Product Security has rated this update as having a security
impact of Moderate. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.

Open vSwitch provides standard network bridging functions and support
for the OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es) :

* dpdk: possible memory leak leads to denial of service
(CVE-2019-14818)

For more details about the security issue(s), including the impact, a
CVSS score, acknowledgments, and other related information, refer to
the CVE page(s) listed in the References section.

Bug Fix(es) :

* ovs-tcpundump doesn't work well on special packet (BZ#1780553)

* ovs-tcpundump -V won't exit (BZ#1780555)

* SyntaxError: Missing parentheses in call to 'print' (BZ#1780563)

* measure the time needed by ovn-controller to resync to a new SB db
(BZ# 1780719)"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/errata/RHSA-2020:0172"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/security/cve/cve-2019-14818"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:network-scripts-openvswitch2.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-openvswitch2.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-openvswitch2.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/22");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/22");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Red Hat Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 8.x", "Red Hat " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);

yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo)) 
{
  rhsa = "RHSA-2020:0172";
  yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
  if (!empty_or_null(yum_report))
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : yum_report 
    );
    exit(0);
  }
  else
  {
    audit_message = "affected by Red Hat security advisory " + rhsa;
    audit(AUDIT_OS_NOT, audit_message);
  }
}
else
{
  flag = 0;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"network-scripts-openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"network-scripts-openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"openvswitch2.12-debuginfo-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"openvswitch2.12-debuginfo-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"openvswitch2.12-debugsource-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"openvswitch2.12-debugsource-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"openvswitch2.12-devel-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"openvswitch2.12-devel-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", reference:"openvswitch2.12-test-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"python3-openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"python3-openvswitch2.12-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"s390x", reference:"python3-openvswitch2.12-debuginfo-2.12.0-12.el8fdp")) flag++;
  if (rpm_check(release:"RHEL8", cpu:"x86_64", reference:"python3-openvswitch2.12-debuginfo-2.12.0-12.el8fdp")) flag++;

  if (flag)
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get() + redhat_report_package_caveat()
    );
    exit(0);
  }
  else
  {
    tested = pkg_tests_get();
    if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
    else audit(AUDIT_PACKAGE_NOT_INSTALLED, "network-scripts-openvswitch2.12 / openvswitch2.12 / etc");
  }
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:0412-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(133836);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/02/24");

  script_cve_id("CVE-2019-14818");

  script_name(english:"SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:0412-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for dpdk to version 18.11.3 fixes the following issues :

dpdk was updated to 18.11.3

Security issue fixed :

CVE-2019-14818: Fixed a memory leak vulnerability caused by a
malicious container may lead to to denial of service (bsc#1156146).

Other issues addressed: Changed to multibuild (bsc#1151455).

Fixed a regression caused by loading old version drivers
(bsc#1157179).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1151455"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1156146"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1157179"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-14818/"
  );
  # https://www.suse.com/support/update/announcement/2020/suse-su-20200412-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?923ece8f"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Software Development Kit 12-SP5:zypper in -t
patch SUSE-SLE-SDK-12-SP5-2020-412=1

SUSE Linux Enterprise Server 12-SP5:zypper in -t patch
SUSE-SLE-SERVER-12-SP5-2020-412=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-kmp-default");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-kmp-default-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:dpdk-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libdpdk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libdpdk-18_11-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/02/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/20");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);
if (cpu >!< "x86_64") audit(AUDIT_ARCH_NOT, "x86_64", cpu);


sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP5", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-debuginfo-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-debugsource-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-tools-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-tools-debuginfo-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"libdpdk-18_11-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"libdpdk-18_11-debuginfo-18.11.3-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-kmp-default-18.11.3_k4.12.14_122.12-3.6.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"x86_64", reference:"dpdk-kmp-default-debuginfo-18.11.3_k4.12.14_122.12-3.6.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "dpdk");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Red Hat Security Advisory RHSA-2020:0168. The text 
# itself is copyright (C) Red Hat, Inc.
#

include("compat.inc");

if (description)
{
  script_id(133159);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/24");

  script_cve_id("CVE-2019-14818");
  script_xref(name:"RHSA", value:"2020:0168");

  script_name(english:"RHEL 7 : openvswitch2.12 (RHSA-2020:0168)");
  script_summary(english:"Checks the rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Red Hat host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"An update for openvswitch2.12 is now available for Fast Datapath for
RHEL 7.

Red Hat Product Security has rated this update as having a security
impact of Moderate. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.

Open vSwitch provides standard network bridging functions and support
for the OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es) :

* dpdk: possible memory leak leads to denial of service
(CVE-2019-14818)

For more details about the security issue(s), including the impact, a
CVSS score, acknowledgments, and other related information, refer to
the CVE page(s) listed in the References section.

Bug Fix(es) :

* measure the time needed by ovn-controller to resync to a new SB db
(BZ# 1720653)"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/errata/RHSA-2020:0168"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/security/cve/cve-2019-14818"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.12-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-openvswitch2.12");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/22");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Red Hat Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);

yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo)) 
{
  rhsa = "RHSA-2020:0168";
  yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
  if (!empty_or_null(yum_report))
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : yum_report 
    );
    exit(0);
  }
  else
  {
    audit_message = "affected by Red Hat security advisory " + rhsa;
    audit(AUDIT_OS_NOT, audit_message);
  }
}
else
{
  flag = 0;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.12-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.12-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.12-debuginfo-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.12-debuginfo-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.12-devel-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.12-devel-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", reference:"openvswitch2.12-test-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"python-openvswitch2.12-2.12.0-12.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"python-openvswitch2.12-2.12.0-12.el7fdp")) flag++;

  if (flag)
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get() + redhat_report_package_caveat()
    );
    exit(0);
  }
  else
  {
    tested = pkg_tests_get();
    if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
    else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openvswitch2.12 / openvswitch2.12-debuginfo / openvswitch2.12-devel / etc");
  }
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Red Hat Security Advisory RHSA-2020:0166. The text 
# itself is copyright (C) Red Hat, Inc.
#

include("compat.inc");

if (description)
{
  script_id(133127);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/23");

  script_cve_id("CVE-2019-14818");
  script_xref(name:"RHSA", value:"2020:0166");

  script_name(english:"RHEL 7 : openvswitch2.11 (RHSA-2020:0166)");
  script_summary(english:"Checks the rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Red Hat host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"An update for openvswitch2.11 is now available for Fast Datapath for
RHEL 7.

Red Hat Product Security has rated this update as having a security
impact of Moderate. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.

Open vSwitch provides standard network bridging functions and support
for the OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es) :

* dpdk: possible memory leak leads to denial of service
(CVE-2019-14818)

For more details about the security issue(s), including the impact, a
CVSS score, acknowledgments, and other related information, refer to
the CVE page(s) listed in the References section.

Bug Fix(es) :

* [openvswitch] No traffic over GRE IPv6 tunnel - OVS issue
(userspace) (BZ# 1725623)

* [RHEL 7] [ovsdb-server] Allow replicating from older schema servers
(BZ# 1766586)

* measure the time needed by ovn-controller to resync to a new SB db
(BZ# 1776883)

* [ovs2.11] SSL connections drops are constantly logged in
ovsdb-server-nb.log (BZ#1780745)"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/errata/RHSA-2020:0166"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://access.redhat.com/security/cve/cve-2019-14818"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.11-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.11-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvswitch2.11-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-openvswitch2.11");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/21");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Red Hat Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);

yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo)) 
{
  rhsa = "RHSA-2020:0166";
  yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
  if (!empty_or_null(yum_report))
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : yum_report 
    );
    exit(0);
  }
  else
  {
    audit_message = "affected by Red Hat security advisory " + rhsa;
    audit(AUDIT_OS_NOT, audit_message);
  }
}
else
{
  flag = 0;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.11-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.11-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.11-debuginfo-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.11-debuginfo-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"openvswitch2.11-devel-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"openvswitch2.11-devel-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", reference:"openvswitch2.11-test-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"s390x", reference:"python-openvswitch2.11-2.11.0-35.el7fdp")) flag++;
  if (rpm_check(release:"RHEL7", cpu:"x86_64", reference:"python-openvswitch2.11-2.11.0-35.el7fdp")) flag++;

  if (flag)
  {
    security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get() + redhat_report_package_caveat()
    );
    exit(0);
  }
  else
  {
    tested = pkg_tests_get();
    if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
    else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openvswitch2.11 / openvswitch2.11-debuginfo / openvswitch2.11-devel / etc");
  }
}