EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1270)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

EulerOS 2.0 SP9 : ksh (EulerOS-SA-2021-1266)

According to the version of the ksh package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass...

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1278)

According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FAPI PolicyPCR not instatiating correctly.CVE-2020-24455 Note that Tenable Network Security has extracted the preceding description block directly...

EulerOS 2.0 SP9 : libcroco (EulerOS-SA-2021-1267)

According to the version of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption.CVE-2020-12825 Note that...

EulerOS 2.0 SP9 : python-paramiko (EulerOS-SA-2021-1253)

According to the version of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that ca...

EulerOS 2.0 SP5 : poppler (EulerOS-SA-2021-1225)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of servic...

EulerOS 2.0 SP5 : libtar (EulerOS-SA-2021-1206)

According to the version of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attacke...

EulerOS 2.0 SP5 : nasm (EulerOS-SA-2021-1216)

According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Netwide Assembler NASM 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the...

EulerOS 2.0 SP5 : subversion (EulerOS-SA-2021-1235)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed...

EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2021-1202)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.CVE-2017-15232 Note that Tenable...

EulerOS 2.0 SP5 : python (EulerOS-SA-2021-1226)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP.CVE-2020-27619 -...

EulerOS 2.0 SP5 : bzr (EulerOS-SA-2021-1180)

According to the version of the bzr package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash charact...

EulerOS 2.0 SP5 : xorg-x11-server (EulerOS-SA-2021-1239)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the X.Org Server. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerabilit...

EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2021-1211)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause...

EulerOS 2.0 SP5 : libexif (EulerOS-SA-2021-1201)

According to the version of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS...

EulerOS 2.0 SP5 : doxygen (EulerOS-SA-2021-1186)

According to the version of the doxygen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe...

EulerOS 2.0 SP5 : sox (EulerOS-SA-2021-1231)

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound...

EulerOS 2.0 SP5 : spice-gtk (EulerOS-SA-2021-1233)

According to the versions of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...

EulerOS 2.0 SP5 : cairo (EulerOS-SA-2021-1181)

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application...

EulerOS 2.0 SP5 : compat-poppler022 (EulerOS-SA-2021-1185)

According to the version of the compat-poppler022 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.c...