EulerOS Virtualization 2.10.0 : zlib (EulerOS-SA-2022-2924)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field...

EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2022-2950)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2949)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2932)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds. CVE-2021-33655 - In...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2022-2919)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.10.0 : shadow (EulerOS-SA-2022-2918)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable...

EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2022-2939)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip...

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2022-2931)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2935)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

EulerOS Virtualization 2.10.1 : net-snmp (EulerOS-SA-2022-2938)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds...

EulerOS Virtualization 2.10.1 : shadow (EulerOS-SA-2022-2944)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable...

EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2022-2948)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain names' attack. The...

EulerOS Virtualization 2.10.0 : python-ldap (EulerOS-SA-2022-2914)

According to the versions of the python-ldap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions,...

EulerOS Virtualization 2.10.0 : mariadb-connector-c (EulerOS-SA-2022-2911)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

EulerOS Virtualization 2.10.0 : libtirpc (EulerOS-SA-2022-2910)

According to the versions of the libtirpc package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TC...

EulerOS Virtualization 2.10.0 : dnsmasq (EulerOS-SA-2022-2901)

According to the versions of the dnsmasq package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat...

EulerOS Virtualization 2.10.1 : libvirt (EulerOS-SA-2022-2899)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2867)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2022-2898)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc function can lead to the...

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2022-2880)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc function can lead to the...