EulerOS Virtualization 3.0.2.6 : sudo (EulerOS-SA-2021-1424)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileg...

EulerOS Virtualization 3.0.6.6 : gnome-keyring (EulerOS-SA-2021-1478)

According to the version of the gnome-keyring packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from t...

EulerOS Virtualization 2.9.1 : cpio (EulerOS-SA-2021-1593)

According to the version of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a...

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2021-1412)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable...

EulerOS Virtualization 3.0.2.6 : dnsmasq (EulerOS-SA-2021-1411)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with...

EulerOS Virtualization 3.0.2.6 : cifs-utils (EulerOS-SA-2021-1409)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject...

EulerOS Virtualization 2.9.1 : glib2 (EulerOS-SA-2021-1599)

According to the version of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE:...

EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2021-1619)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2021-1460)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a use-after-free was identified in 'confopt' function in 'tools/parser/l2cap.c' source file. This issue can be...

EulerOS Virtualization 3.0.6.6 : cairo (EulerOS-SA-2021-1461)

According to the versions of the cairo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file...

EulerOS Virtualization 3.0.6.6 : file (EulerOS-SA-2021-1471)

According to the version of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.CVE-2014-962...

EulerOS Virtualization 3.0.2.6 : python-lxml (EulerOS-SA-2021-1420)

According to the version of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which...

EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2021-1630)

According to the version of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as roo...

EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2021-1625)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, whi...

EulerOS Virtualization 3.0.2.6 : spice (EulerOS-SA-2021-1451)

According to the version of the spice packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...

EulerOS Virtualization for ARM 64 3.0.2.0 : libtiff (EulerOS-SA-2021-1393)

According to the version of the libtiff package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a...

EulerOS Virtualization 3.0.6.6 : krb5 (EulerOS-SA-2021-1487)

According to the version of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message becaus...

EulerOS Virtualization 2.9.1 : freetype (EulerOS-SA-2021-1598)

According to the version of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap...

EulerOS Virtualization 3.0.2.6 : openssl (EulerOS-SA-2021-1418)

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as...

EulerOS Virtualization 3.0.2.6 : unbound (EulerOS-SA-2021-1426)

According to the version of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local...