EulerOS Virtualization 2.5.1 : git (EulerOS-SA-2018-1377)

According to the versions of the git package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way git-shell handled command-line options for the restricted set of git-shell commands. A remote,...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1369)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the...

EulerOS Virtualization 2.5.1 : patch (EulerOS-SA-2018-1378)

According to the version of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM...

EulerOS Virtualization 2.5.2 : systemd (EulerOS-SA-2018-1371)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...

EulerOS Virtualization 2.5.1 : sudo (EulerOS-SA-2018-1380)

According to the version of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system, popen, or...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1372)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect...

EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1326)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

EulerOS Virtualization 2.5.1 : wget (EulerOS-SA-2018-1342)

According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...

EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1338)

According to the version of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to...

EulerOS Virtualization 2.5.1 : yum-utils (EulerOS-SA-2018-1327)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security ha...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1352)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote...

EulerOS Virtualization 2.5.0 : wget (EulerOS-SA-2018-1348)

According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...

EulerOS Virtualization 2.5.0 : openssl (EulerOS-SA-2018-1339)

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC...

EulerOS Virtualization 2.5.0 : procps-ng (EulerOS-SA-2018-1340)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

EulerOS Virtualization 2.5.1 : mariadb (EulerOS-SA-2018-1337)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - mysql: Client programs unspecified vulnerability CPU Jul 2017 CVE-2017-3636 - mysql: Server: DML unspecified vulnerability CPU J...

EulerOS Virtualization 2.5.0 : libtasn1 (EulerOS-SA-2018-1334)

According to the version of the libtasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Two errors in the 'asn1findnode' function lib/parseraux.c within GnuTLS libtasn1 version 4.10 can be exploited to cause a...

EulerOS Virtualization 2.5.0 : curl (EulerOS-SA-2018-1330)

According to the versions of the curl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a...

EulerOS Virtualization 2.5.1 : bind (EulerOS-SA-2018-1328)

According to the version of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A denial of service flaw was discovered in bind versions that include the 'deny-answer-aliases' feature. This flaw may allow a remote...

EulerOS Virtualization 2.5.0 : bind (EulerOS-SA-2018-1343)

According to the version of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A denial of service flaw was discovered in bind versions that include the 'deny-answer-aliases' feature. This flaw may allow a remote...

EulerOS Virtualization 2.5.0 : gcc (EulerOS-SA-2018-1331)

According to the versions of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The gcc package contains the GNU Compiler Collection version 4.8.You'll need this package in order to compile C code. - Security...