Vulnerabilities > CVE-2019-14822 - Missing Authorization vulnerability in multiple products

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4134-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include("compat.inc");

if (description)
{
  script_id(128967);
  script_version("1.4");
  script_cvs_date("Date: 2019/12/27");

  script_cve_id("CVE-2019-14822");
  script_xref(name:"USN", value:"4134-1");

  script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS / 19.04 : ibus vulnerability (USN-4134-1)");
  script_summary(english:"Checks dpkg output for updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Ubuntu host is missing a security-related patch."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Simon McVittie discovered that IBus did not enforce appropriate access
controls on its private D-Bus socket. A local unprivileged user who
discovers the IBus socket address of another user could exploit this
to capture the key strokes of the other user.

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://usn.ubuntu.com/4134-1/"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected ibus package.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:19.04");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/17");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"Ubuntu Security Notice (C) 2019 Canonical, Inc. / NASL script (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Ubuntu Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("ubuntu.inc");
include("misc_func.inc");

if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/Ubuntu/release");
if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
release = chomp(release);
if (! preg(pattern:"^(16\.04|18\.04|19\.04)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 16.04 / 18.04 / 19.04", "Ubuntu " + release);
if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);

flag = 0;

if (ubuntu_check(osver:"16.04", pkgname:"ibus", pkgver:"1.5.11-1ubuntu2.2")) flag++;
if (ubuntu_check(osver:"18.04", pkgname:"ibus", pkgver:"1.5.17-3ubuntu5.1")) flag++;
if (ubuntu_check(osver:"19.04", pkgname:"ibus", pkgver:"1.5.19-1ubuntu2.1")) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_NOTE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4134-3. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include("compat.inc");

if (description)
{
  script_id(134888);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/27");

  script_cve_id("CVE-2019-14822");
  script_xref(name:"USN", value:"4134-3");

  script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS / 19.10 : ibus vulnerability (USN-4134-3)");
  script_summary(english:"Checks dpkg output for updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Ubuntu host is missing a security-related patch."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"USN-4134-1 fixed a vulnerability in IBus. The update caused a
regression in some Qt applications and the fix was subsequently
reverted in USN-4134-2. The regression has since been resolved and so
this update fixes the original vulnerability.

We apologize for the inconvenience.

Original advisory details :

Simon McVittie discovered that IBus did not enforce appropriate access
controls on its private D-Bus socket. A local unprivileged user who
discovers the IBus socket address of another user could exploit this
to capture the key strokes of the other user.

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://usn.ubuntu.com/4134-3/"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected ibus package.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:19.10");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/03/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/25");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Ubuntu Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("ubuntu.inc");
include("misc_func.inc");

if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/Ubuntu/release");
if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
release = chomp(release);
if (! preg(pattern:"^(16\.04|18\.04|19\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 16.04 / 18.04 / 19.10", "Ubuntu " + release);
if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);

flag = 0;

if (ubuntu_check(osver:"16.04", pkgname:"ibus", pkgver:"1.5.11-1ubuntu2.4")) flag++;
if (ubuntu_check(osver:"18.04", pkgname:"ibus", pkgver:"1.5.17-3ubuntu5.3")) flag++;
if (ubuntu_check(osver:"19.10", pkgname:"ibus", pkgver:"1.5.21-1~exp2ubuntu2.1")) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_NOTE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-c10700afdc.
#

include("compat.inc");

if (description)
{
  script_id(129646);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/19");

  script_cve_id("CVE-2019-14822");
  script_xref(name:"FEDORA", value:"2019-c10700afdc");

  script_name(english:"Fedora 31 : ibus (2019-c10700afdc)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Security fix for CVE-2019-14822

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-c10700afdc"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected ibus package.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ibus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:31");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/07");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^31([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 31", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC31", reference:"ibus-1.5.21-2.fc31")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_NOTE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:2389-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(128990);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/27");

  script_cve_id("CVE-2019-14822");

  script_name(english:"SUSE SLED12 / SLES12 Security Update : ibus (SUSE-SU-2019:2389-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for ibus fixes the following issues :

Security issue fixed :

CVE-2019-14822: Fixed a misconfiguration of the DBus server that
allowed an unprivileged user to monitor and send method calls to the
ibus bus of another user. (bsc#1150011)

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1150011"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-14822/"
  );
  # https://www.suse.com/support/update/announcement/2019/suse-su-20192389-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?05b484aa"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud Crowbar 8:zypper in -t patch
SUSE-OpenStack-Cloud-Crowbar-8-2019-2389=1

SUSE OpenStack Cloud 8:zypper in -t patch
SUSE-OpenStack-Cloud-8-2019-2389=1

SUSE OpenStack Cloud 7:zypper in -t patch
SUSE-OpenStack-Cloud-7-2019-2389=1

SUSE Linux Enterprise Workstation Extension 12-SP5:zypper in -t patch
SUSE-SLE-WE-12-SP5-2019-2389=1

SUSE Linux Enterprise Workstation Extension 12-SP4:zypper in -t patch
SUSE-SLE-WE-12-SP4-2019-2389=1

SUSE Linux Enterprise Software Development Kit 12-SP5:zypper in -t
patch SUSE-SLE-SDK-12-SP5-2019-2389=1

SUSE Linux Enterprise Software Development Kit 12-SP4:zypper in -t
patch SUSE-SLE-SDK-12-SP4-2019-2389=1

SUSE Linux Enterprise Server for SAP 12-SP3:zypper in -t patch
SUSE-SLE-SAP-12-SP3-2019-2389=1

SUSE Linux Enterprise Server for SAP 12-SP2:zypper in -t patch
SUSE-SLE-SAP-12-SP2-2019-2389=1

SUSE Linux Enterprise Server 12-SP5:zypper in -t patch
SUSE-SLE-SERVER-12-SP5-2019-2389=1

SUSE Linux Enterprise Server 12-SP4:zypper in -t patch
SUSE-SLE-SERVER-12-SP4-2019-2389=1

SUSE Linux Enterprise Server 12-SP3-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-2019-2389=1

SUSE Linux Enterprise Server 12-SP3-BCL:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-BCL-2019-2389=1

SUSE Linux Enterprise Server 12-SP2-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP2-2019-2389=1

SUSE Linux Enterprise Server 12-SP2-BCL:zypper in -t patch
SUSE-SLE-SERVER-12-SP2-BCL-2019-2389=1

SUSE Linux Enterprise Desktop 12-SP5:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP5-2019-2389=1

SUSE Linux Enterprise Desktop 12-SP4:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP4-2019-2389=1

SUSE Enterprise Storage 5:zypper in -t patch
SUSE-Storage-5-2019-2389=1

SUSE Enterprise Storage 4:zypper in -t patch
SUSE-Storage-4-2019-2389=1

HPE Helion Openstack 8:zypper in -t patch
HPE-Helion-OpenStack-8-2019-2389=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-IBus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/18");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(2|3|4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP2/3/4/5", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP4/5", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", cpu:"x86_64", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", cpu:"x86_64", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk3-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libibus-1_0-5-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"python-ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-debugsource-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk3-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk3-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"ibus-gtk3-debuginfo-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"libibus-1_0-5-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"libibus-1_0-5-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"libibus-1_0-5-debuginfo-32bit-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"python-ibus-1.5.13-15.11.2")) flag++;
if (rpm_check(release:"SLED12", sp:"5", cpu:"x86_64", reference:"typelib-1_0-IBus-1_0-1.5.13-15.11.2")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Debian Security Advisory DSA-4525. The text 
# itself is copyright (C) Software in the Public Interest, Inc.
#

include("compat.inc");

if (description)
{
  script_id(129026);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/27");

  script_cve_id("CVE-2019-14822");
  script_xref(name:"DSA", value:"4525");

  script_name(english:"Debian DSA-4525-1 : ibus - security update");
  script_summary(english:"Checks dpkg output for the updated package");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Debian host is missing a security-related update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Simon McVittie reported a flaw in ibus, the Intelligent Input Bus. Due
to a misconfiguration during the setup of the DBus, any unprivileged
user could monitor and send method calls to the ibus bus of another
user, if able to discover the UNIX socket used by another user
connected on a graphical environment. The attacker can take advantage
of this flaw to intercept keystrokes of the victim user or modify
input related configurations through DBus method calls."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940267"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://security-tracker.debian.org/tracker/source-package/ibus"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://packages.debian.org/source/stretch/ibus"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://packages.debian.org/source/buster/ibus"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.debian.org/security/2019/dsa-4525"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Upgrade the ibus packages.

For the oldstable distribution (stretch), this problem has been fixed
in version 1.5.14-3+deb9u2.

For the stable distribution (buster), this problem has been fixed in
version 1.5.19-4+deb10u1."
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/19");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Debian Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("debian_package.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (deb_check(release:"10.0", prefix:"gir1.2-ibus-1.0", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"ibus", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"ibus-doc", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"ibus-gtk", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"ibus-gtk3", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"ibus-wayland", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"libibus-1.0-5", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"10.0", prefix:"libibus-1.0-dev", reference:"1.5.19-4+deb10u1")) flag++;
if (deb_check(release:"9.0", prefix:"gir1.2-ibus-1.0", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus-dbg", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus-doc", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus-gtk", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus-gtk3", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"ibus-wayland", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"libibus-1.0-5", reference:"1.5.14-3+deb9u2")) flag++;
if (deb_check(release:"9.0", prefix:"libibus-1.0-dev", reference:"1.5.14-3+deb9u2")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:deb_report_get());
  else security_note(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2019-2174.
#
# The text description of this plugin is (C) SUSE LLC.
#

include("compat.inc");

if (description)
{
  script_id(129340);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/23");

  script_cve_id("CVE-2019-14822");

  script_name(english:"openSUSE Security Update : ibus (openSUSE-2019-2174)");
  script_summary(english:"Check for the openSUSE-2019-2174 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for ibus fixes the following issues :

Security issue fixed :

  - CVE-2019-14822: Fixed a misconfiguration of the DBus
    server that allowed an unprivileged user to monitor and
    send method calls to the ibus bus of another user.
    (bsc#1150011)

This update was imported from the SUSE:SLE-15:Update update project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1150011"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected ibus packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-branding-openSUSE-KDE");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk3-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk3-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-gtk3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ibus-lang");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libibus-1_0-5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libibus-1_0-5-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libibus-1_0-5-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libibus-1_0-5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:typelib-1_0-IBus-1_0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.0");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/25");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.0", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.0", reference:"ibus-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-branding-openSUSE-KDE-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-debugsource-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-devel-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-gtk-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-gtk-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-gtk3-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-gtk3-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ibus-lang-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libibus-1_0-5-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libibus-1_0-5-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python-ibus-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"typelib-1_0-IBus-1_0-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"ibus-gtk-32bit-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"ibus-gtk-32bit-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"ibus-gtk3-32bit-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"ibus-gtk3-32bit-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libibus-1_0-5-32bit-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"libibus-1_0-5-32bit-debuginfo-1.5.17-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"python3-ibus-1.5.17-lp150.4.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus / ibus-branding-openSUSE-KDE / ibus-debuginfo / etc");
}

#
# (C) Tenable Network Security, Inc.
#

# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2020:1880. The text
# itself is copyright (C) Red Hat, Inc.
#


include('compat.inc');

if (description)
{
  script_id(136047);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/04/29");

  script_cve_id("CVE-2019-14822");
  script_xref(name:"RHSA", value:"2020:1880");

  script_name(english:"RHEL 8 : ibus and glib2 (RHSA-2020:1880)");
  script_summary(english:"Checks the rpm output for the updated packages");

  script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in
the RHSA-2020:1880 advisory.

  - ibus: missing authorization allows local attacker to
    access the input bus of another user (CVE-2019-14822)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://cwe.mitre.org/data/definitions/862.html");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2020:1880");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2019-14822");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1717958");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-14822");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(862);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/04/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/04/28");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:enterprise_linux:8::appstream");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:redhat:enterprise_linux:8::crb");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8::baseos");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-fam");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glib2-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-devel-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-gtk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-setup");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ibus-wayland");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Red Hat Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include('audit.inc');
include('global_settings.inc');
include('misc_func.inc');
include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item('Host/RedHat/release');
if (isnull(release) || 'Red Hat' >!< release) audit(AUDIT_OS_NOT, 'Red Hat');
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
os_ver = os_ver[1];
if (! preg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, 'Red Hat 8.x', 'Red Hat ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);

pkgs = [
    {'reference':'glib2-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-2.56.4-8.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'glib2-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'glib2-debugsource-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-debugsource-2.56.4-8.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'glib2-debugsource-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-debugsource-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'glib2-devel-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-devel-2.56.4-8.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'glib2-devel-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-devel-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'glib2-doc-2.56.4-8.el8', 'release':'8'},
    {'reference':'glib2-fam-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-fam-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-fam-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'glib2-static-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-static-2.56.4-8.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'glib2-static-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-static-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'glib2-tests-2.56.4-8.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'glib2-tests-2.56.4-8.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'glib2-tests-2.56.4-8.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-debugsource-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-debugsource-1.5.19-11.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'ibus-debugsource-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-debugsource-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-devel-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-devel-1.5.19-11.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'ibus-devel-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-devel-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-devel-docs-1.5.19-11.el8', 'release':'8'},
    {'reference':'ibus-gtk2-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-gtk2-1.5.19-11.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'ibus-gtk2-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-gtk2-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-gtk3-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-gtk3-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-gtk3-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-libs-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-libs-1.5.19-11.el8', 'cpu':'i686', 'release':'8'},
    {'reference':'ibus-libs-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-libs-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'},
    {'reference':'ibus-setup-1.5.19-11.el8', 'release':'8'},
    {'reference':'ibus-wayland-1.5.19-11.el8', 'cpu':'aarch64', 'release':'8'},
    {'reference':'ibus-wayland-1.5.19-11.el8', 'cpu':'s390x', 'release':'8'},
    {'reference':'ibus-wayland-1.5.19-11.el8', 'cpu':'x86_64', 'release':'8'}
];

flag = 0;
foreach package_array ( pkgs ) {
  reference = NULL;
  release = NULL;
  sp = NULL;
  cpu = NULL;
  el_string = NULL;
  rpm_spec_vers_cmp = NULL;
  epoch = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) release = 'RHEL' + package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (reference && release) {
    if (rpm_spec_vers_cmp) {
      if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:TRUE)) flag++;
    }
    else
    {
      if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch)) flag++;
    }
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_NOTE,
      extra      : rpm_report_get() + redhat_report_package_caveat()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'glib2 / glib2-debugsource / glib2-devel / etc');
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:2427-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(129160);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/24");

  script_cve_id("CVE-2019-14822");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : ibus (SUSE-SU-2019:2427-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for ibus fixes the following issues :

CVE-2019-14822: Fixed misconfiguration of the DBus server allows to
unprivileged user could monitor and send method calls to the ibus bus
of another user (bsc#1150011).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1150011"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-14822/"
  );
  # https://www.suse.com/support/update/announcement/2019/suse-su-20192427-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?087a2d7a"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15-SP1:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2427=1

SUSE Linux Enterprise Module for Desktop Applications 15-SP1:zypper in
-t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-2427=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-IBus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/23");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP1", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP1", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"ibus-debugsource-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"ibus-gtk-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"ibus-gtk-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"ibus-gtk3-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"ibus-gtk3-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"libibus-1_0-5-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"libibus-1_0-5-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python-ibus-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-debugsource-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-devel-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-gtk-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-gtk-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-gtk3-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"ibus-gtk3-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"libibus-1_0-5-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"libibus-1_0-5-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"typelib-1_0-IBus-1_0-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"ibus-debugsource-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"ibus-gtk-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"ibus-gtk-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"ibus-gtk3-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"ibus-gtk3-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"libibus-1_0-5-32bit-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"libibus-1_0-5-32bit-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python-ibus-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-debugsource-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-devel-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-gtk-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-gtk-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-gtk3-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"ibus-gtk3-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"libibus-1_0-5-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"libibus-1_0-5-debuginfo-1.5.19-8.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"typelib-1_0-IBus-1_0-1.5.19-8.3.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:2387-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(128988);
  script_version("1.3");
  script_cvs_date("Date: 2019/12/27");

  script_cve_id("CVE-2019-14822");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : ibus (SUSE-SU-2019:2387-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for ibus fixes the following issues :

Security issue fixed :

CVE-2019-14822: Fixed a misconfiguration of the DBus server that
allowed an unprivileged user to monitor and send method calls to the
ibus bus of another user. (bsc#1150011)

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1150011"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2019-14822/"
  );
  # https://www.suse.com/support/update/announcement/2019/suse-su-20192387-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?1a96f8a9"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15-SP1:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2387=1

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-2019-2387=1

SUSE Linux Enterprise Module for Desktop Applications 15:zypper in -t
patch SUSE-SLE-Module-Desktop-Applications-15-2019-2387=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:ibus-gtk3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libibus-1_0-5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-ibus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-IBus");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/09/18");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0/1", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0/1", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-debugsource-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-devel-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-gtk-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-gtk-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-gtk3-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"ibus-gtk3-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libibus-1_0-5-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libibus-1_0-5-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"typelib-1_0-IBus-1_0-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-debugsource-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-devel-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-gtk-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-gtk-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-gtk3-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"ibus-gtk3-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libibus-1_0-5-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libibus-1_0-5-debuginfo-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python-ibus-1.5.17-5.3.1")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"typelib-1_0-IBus-1_0-1.5.17-5.3.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus");
}