EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2021-2179)

According to the version of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that...

EulerOS Virtualization 2.9.0 : zstd (EulerOS-SA-2021-2201)

According to the versions of the zstd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created...

EulerOS Virtualization 2.9.1 : gnutls (EulerOS-SA-2021-2184)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption an...

EulerOS Virtualization 2.9.1 : dhcp (EulerOS-SA-2021-2188)

According to the version of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and...

EulerOS Virtualization 2.9.0 : libtomcrypt (EulerOS-SA-2021-2196)

According to the version of the libtomcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invali...

EulerOS Virtualization 2.9.1 : unbound (EulerOS-SA-2021-2175)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. NOTE: The vendor disputes that...

EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2021-2176)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in...

EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2021-2203)

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server...

EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2021-2185)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed conten...

EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2021-2206)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in...

VMware ESXi 授权问题漏洞

Vmware VMware ESXi is a server virtualization platform from Vmware that can be installed directly on physical servers. An authorization issue vulnerability exists in VMware ESXi, which stems from a vulnerability in the product's SFCB authentication feature, which allows an attacker to bypass SFCB...

EulerOS Virtualization 2.9.0 : babel (EulerOS-SA-2021-2202)

According to the version of the babel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.CVE-2021-20095...

EulerOS Virtualization 2.9.1 : babel (EulerOS-SA-2021-2182)

According to the version of the babel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.CVE-2021-20095...

EulerOS Virtualization 2.9.0 : libxml2 (EulerOS-SA-2021-2193)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed conten...

EulerOS Virtualization 2.9.0 : unbound (EulerOS-SA-2021-2210)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. NOTE: The vendor disputes that...

EulerOS Virtualization 2.9.0 : gnutls (EulerOS-SA-2021-2204)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in gnutls. A use after free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption an...

EulerOS Virtualization 2.9.0 : dhcp (EulerOS-SA-2021-2205)

According to the version of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and...

EulerOS Virtualization 2.9.1 : zstd (EulerOS-SA-2021-2177)

According to the versions of the zstd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2021-2192)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a...

EulerOS Virtualization 2.9.1 : cifs-utils (EulerOS-SA-2021-2191)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can...