EulerOS 2.0 SP10 : pixman (EulerOS-SA-2023-1395)

According to the versions of the pixman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflo...

EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1384)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1391)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory...

EulerOS 2.0 SP10 : python3 (EulerOS-SA-2023-1368)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to...

EulerOS 2.0 SP10 : dhcp (EulerOS-SA-2023-1381)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively...

EulerOS 2.0 SP10 : linux-firmware (EulerOS-SA-2022-2826)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2022-2859)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2022-2831)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally th...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2861)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.0360. CVE-2022-3099 - Use After Free in GitHub repository vim/vim prior to 9.0.0389...

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2022-2650)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may...

EulerOS 2.0 SP10 : shadow (EulerOS-SA-2022-2666)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable Network Securit...

EulerOS 2.0 SP10 : colord (EulerOS-SA-2022-2676)

According to the versions of the colord package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c...

EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2022-2695)

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together wi...

EulerOS 2.0 SP10 : bison (EulerOS-SA-2022-2642)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2671)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to 9.0. CVE-2022-22...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-2675)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in...

EulerOS 2.0 SP10 : git (EulerOS-SA-2022-2680)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerab...

EulerOS 2.0 SP10 : kexec-tools (EulerOS-SA-2022-2687)

According to the versions of the kexec-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and...

EulerOS 2.0 SP10 : mariadb-connector-c (EulerOS-SA-2022-2691)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmeti...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2022-2425)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Bi...