24247 matches found
EulerOS 2.0 SP9 : httpd (EulerOS-SA-2023-3334)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. CVE-2023-31122 - When a...
EulerOS Virtualization 3.0.6.0 : linux-firmware (EulerOS-SA-2023-3437)
According to the versions of the linux-firmware packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access...
EulerOS 2.0 SP10 : nghttp2 (EulerOS-SA-2023-3189)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping structures upon...
EulerOS 2.0 SP11 : grpc (EulerOS-SA-2023-3007)
According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exception...
EulerOS 2.0 SP11 : nghttp2 (EulerOS-SA-2023-3038)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping structures upon...
Ubuntu 20.04 LTS / 22.04 ESM / 23.04 / 23.10 : Xerces-C++ vulnerability (USN-6579-2)
The remote Ubuntu 20.04 LTS / 22.04 ESM / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6579-2 advisory. USN-6579-1 fixed a vulnerability in Xerces-C++. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-3273)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. CVE-2023-31122 - When a...
EulerOS 2.0 SP9 : nghttp2 (EulerOS-SA-2023-3346)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping structures upon...
EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-3299)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or...
EulerOS 2.0 SP10 : nghttp2 (EulerOS-SA-2024-1068)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as...
EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-3331)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or...
EulerOS 2.0 SP11 : golang (EulerOS-SA-2023-3270)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The html/template package does not properly handle HTML-like '' comment tokens, nor hashbang '!' comment tokens, in contexts. This may cause the...
EulerOS 2.0 SP8 : linux-firmware (EulerOS-SA-2023-3137)
According to the versions of the linux-firmware packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-3245)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. CVE-2023-31122 - When a...
EulerOS 2.0 SP9 : httpd (EulerOS-SA-2023-3302)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. CVE-2023-31122 - When a...
EulerOS 2.0 SP11 : nghttp2 (EulerOS-SA-2023-3254)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as...
EulerOS 2.0 SP11 : golang (EulerOS-SA-2023-3242)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The html/template package does not properly handle HTML-like '' comment tokens, nor hashbang '!' comment tokens, in contexts. This may cause the...
EulerOS Virtualization 2.9.0 : nghttp2 (EulerOS-SA-2024-1019)
According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping...
EulerOS 2.0 SP9 : nghttp2 (EulerOS-SA-2023-3314)
According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping structures upon...
EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1058)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Line directives '//line' can be used to bypass the restrictions on '//go:cgo' directives, allowing blocked linker and compiler flags to be passe...