EulerOS 2.0 SP8 : squashfs-tools (EulerOS-SA-2019-2092)

According to the versions of the squashfs-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the readfragmenttable4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial o...

EulerOS 2.0 SP8 : glib2 (EulerOS-SA-2019-2077)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2019-2080)

According to the version of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/',...

EulerOS 2.0 SP8 : nmap (EulerOS-SA-2019-2085)

According to the version of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leadin...

EulerOS 2.0 SP3 : graphviz (EulerOS-SA-2019-2064)

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The agroot function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by...

EulerOS 2.0 SP3 : freeradius (EulerOS-SA-2019-2065)

According to the version of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to...

EulerOS 2.0 SP3 : zip (EulerOS-SA-2019-2059)

According to the version of the zip package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service invalid free and application crash o...

EulerOS 2.0 SP3 : libpng (EulerOS-SA-2019-2048)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-1995)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEG...

EulerOS 2.0 SP3 : SDL (EulerOS-SA-2019-2045)

According to the versions of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.CVE-2019-7572 - SDL...

EulerOS 2.0 SP3 : mod_auth_mellon (EulerOS-SA-2019-2009)

According to the versions of the modauthmellon package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows...

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-2015)

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow,...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2019-2012)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19869 Note that Tenable...

Ubuntu: Security Advisory (USN-4137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libmspack (EulerOS-SA-2019-2034)

According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in...

EulerOS 2.0 SP3 : grub2 (EulerOS-SA-2019-2011)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could...

EulerOS 2.0 SP3 : dump (EulerOS-SA-2019-2029)

According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could creat...

EulerOS 2.0 SP3 : sssd (EulerOS-SA-2019-2052)

According to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in sssd where, if a user was configured with no home directory set, sssd would return '/' the root directory instead of ''...

EulerOS 2.0 SP3 : libosinfo (EulerOS-SA-2019-2003)

According to the version of the libosinfo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin...

EulerOS 2.0 SP3 : texlive (EulerOS-SA-2019-2062)

According to the version of the texlive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shellescapecommands in the texmf.cnf config...