EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2023-3068)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it h...

EulerOS Virtualization 2.11.0 : dmidecode (EulerOS-SA-2023-2751)

According to the versions of the dmidecode package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of...

EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2023-3075)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact...

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2023-2957)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An out of bounds OOB memory access flaw was found in the Linux kernel in relayfilereadstartpos in kernel/relay.c in the relayfs. Th...

EulerOS Virtualization 2.9.0 : libxml2 (EulerOS-SA-2024-1016)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in...

EulerOS Virtualization 2.9.1 : libssh (EulerOS-SA-2023-2959)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated...

EulerOS Virtualization 2.9.1 : libwebp (EulerOS-SA-2024-1040)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

EulerOS Virtualization 2.9.0 : perl (EulerOS-SA-2023-2993)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuratio...

EulerOS Virtualization 2.11.1 : openldap (EulerOS-SA-2023-2735)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

EulerOS Virtualization 2.10.0 : gdb (EulerOS-SA-2023-3470)

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c...

EulerOS Virtualization 2.10.0 : scipy (EulerOS-SA-2023-3483)

According to the versions of the scipy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function...

EulerOS Virtualization 2.9.1 : gawk (EulerOS-SA-2023-3084)

According to the versions of the gawk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-3000)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for...

EulerOS Virtualization 2.9.1 : libwebp (EulerOS-SA-2023-2961)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to...

EulerOS Virtualization 2.10.1 : openldap (EulerOS-SA-2023-2920)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

EulerOS Virtualization 2.10.0 : elfutils (EulerOS-SA-2023-3466)

According to the versions of the elfutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denia...

EulerOS Virtualization 2.9.1 : perl (EulerOS-SA-2023-3091)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Tenable...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-3373)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in...

EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2023-2737)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Tenable...

EulerOS Virtualization 3.0.6.6 : python-requests (EulerOS-SA-2023-3413)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination...