EulerOS Virtualization 3.0.6.6 : libsepol (EulerOS-SA-2022-2512)

According to the versions of the libsepol packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...

EulerOS Virtualization 3.0.6.6 : libtiff (EulerOS-SA-2022-2514)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'invertImage' function in the component...

EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2022-2537)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext...

EulerOS Virtualization 3.0.6.6 : gdisk (EulerOS-SA-2022-2497)

According to the versions of the gdisk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2022-2541)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3927, CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Us...

EulerOS Virtualization 3.0.6.6 : ldns (EulerOS-SA-2022-2510)

According to the versions of the ldns package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An...

EulerOS Virtualization 3.0.6.6 : rsyslog (EulerOS-SA-2022-2535)

According to the versions of the rsyslog packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when...

EulerOS Virtualization 3.0.6.6 : cyrus-sasl (EulerOS-SA-2022-2492)

According to the versions of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...

EulerOS Virtualization 3.0.6.6 : mariadb (EulerOS-SA-2022-2518)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 -...

EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2022-2500)

According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machine...

EulerOS Virtualization 3.0.6.6 : gdk-pixbuf2 (EulerOS-SA-2022-2498)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer...

EulerOS Virtualization 3.0.6.6 : postgresql (EulerOS-SA-2022-2528)

According to the versions of the postgresql packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24...

EulerOS Virtualization 3.0.6.6 : iproute (EulerOS-SA-2022-2507)

According to the versions of the iproute package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to...

EulerOS Virtualization 3.0.6.6 : flac (EulerOS-SA-2022-2496)

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This cou...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-2488)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...

EulerOS Virtualization 3.0.6.6 : libdb (EulerOS-SA-2022-2511)

According to the versions of the libdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to...

EulerOS Virtualization 3.0.6.6 : shim (EulerOS-SA-2022-2538)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 3.0.6.6 : nfs-utils (EulerOS-SA-2022-2520)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterpris...

EulerOS Virtualization 3.0.6.6 : ruby (EulerOS-SA-2022-2536)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV...

EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2022-2513)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially...