EulerOS Virtualization 3.0.6.0 : patch (EulerOS-SA-2020-1766)

According to the version of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and...

EulerOS Virtualization 3.0.6.0 : shadow-utils (EulerOS-SA-2020-1759)

According to the version of the shadow-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that...

EulerOS Virtualization 3.0.6.0 : telnet (EulerOS-SA-2020-1765)

According to the version of the telnet package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data,...

EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2020-1772)

According to the versions of the libvorbis package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially ...

EulerOS Virtualization 3.0.6.0 : nss-softokn (EulerOS-SA-2020-1754)

According to the versions of the nss-softokn packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. Thi...

EulerOS Virtualization 3.0.6.0 : file (EulerOS-SA-2020-1778)

According to the version of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer...

EulerOS Virtualization 3.0.6.0 : libffi (EulerOS-SA-2020-1760)

According to the version of the libffi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Plea...

EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2020-1739)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of servic...

EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2020-1732)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before...

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2020-1752)

According to the version of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypte...

EulerOS Virtualization 3.0.6.0 : less (EulerOS-SA-2020-1770)

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8...

EulerOS Virtualization 3.0.6.0 : numpy (EulerOS-SA-2020-1730)

According to the version of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attacker...

EulerOS Virtualization 3.0.6.0 : python-jinja2 (EulerOS-SA-2020-1767)

According to the version of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape.CVE-2019-10906 Note that Tenable Network Security has...

EulerOS Virtualization 3.0.6.0 : libosinfo (EulerOS-SA-2020-1786)

According to the version of the libosinfo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to...

EulerOS Virtualization 3.0.6.0 : gdb (EulerOS-SA-2020-1788)

According to the version of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Debugger GDB 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a...

EulerOS Virtualization 3.0.6.0 : libdb (EulerOS-SA-2020-1742)

According to the version of the libdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2020-1762)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. Wh...

EulerOS Virtualization 3.0.6.0 : ghostscript (EulerOS-SA-2020-1738)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...

EulerOS Virtualization 3.0.6.0 : gcc (EulerOS-SA-2020-1726)

According to the version of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted...

EulerOS Virtualization 3.0.6.0 : iptables (EulerOS-SA-2020-1721)

According to the version of the iptables packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially...