EulerOS 2.0 SP11 : shim (EulerOS-SA-2023-3044)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck,...

EulerOS Virtualization 2.10.0 : shadow (EulerOS-SA-2023-3484)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on t...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-3247)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may...

EulerOS 2.0 SP8 : java-1.8.0-openjdk (EulerOS-SA-2023-3130)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component:...

EulerOS 2.0 SP10 : scipy (EulerOS-SA-2023-3230)

According to the versions of the scipy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function. CVE-2023-25399 - A...

EulerOS 2.0 SP10 : libcap (EulerOS-SA-2023-2812)

According to the versions of the libcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the input string is...

EulerOS 2.0 SP11 : libssh (EulerOS-SA-2023-2693)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a...

EulerOS 2.0 SP11 : shadow (EulerOS-SA-2023-2710)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-2672)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. CVE-2023-1264 - Use of Out-of-range Pointer Offset in GitHub repository...

EulerOS 2.0 SP10 : nghttp2 (EulerOS-SA-2024-1092)

According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as...

EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2024-1004)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to ...

EulerOS 2.0 SP8 : sysstat (EulerOS-SA-2023-3161)

According to the versions of the sysstat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete f...

EulerOS 2.0 SP11 : iSulad (EulerOS-SA-2023-3246)

According to the versions of the iSulad package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - iSulad uses the lcr+lxc runtime default to run malicious images, which can cause DOS. CVE-2021-33634 - When malicious images are pulled by isula...

EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2023-3422)

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. Th...

EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2023-2699)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security- relevant memory corruption via malforme...

EulerOS 2.0 SP11 : c-ares (EulerOS-SA-2023-2676)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular...

EulerOS Virtualization 2.9.0 : krb5 (EulerOS-SA-2023-3100)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote...

EulerOS 2.0 SP8 : procps-ng (EulerOS-SA-2023-3147)

According to the versions of the procps-ng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimite...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-2748)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Field thebfd of asymbol is uninitialized in function bfdmachogetsyntheticsymtab.CVE-2023-25588 Field filetable of struct module...

EulerOS 2.0 SP11 : cups (EulerOS-SA-2023-3238)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based...