USN-5669-1: Linux kernel vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

USN-5669-1 linux, linux-dell300x, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

EulerOS Virtualization 3.0.6.0 : cifs-utils (EulerOS-SA-2022-2547)

According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to...

EulerOS Virtualization 3.0.6.0 : zlib (EulerOS-SA-2022-2598)

According to the versions of the zlib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

EulerOS Virtualization 3.0.6.0 : cyrus-sasl (EulerOS-SA-2022-2552)

According to the versions of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2022-2593)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

EulerOS Virtualization 3.0.6.0 : cups (EulerOS-SA-2022-2550)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Montere...

EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2022-2574)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in...

EulerOS Virtualization 3.0.6.0 : flac (EulerOS-SA-2022-2556)

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This cou...

EulerOS Virtualization 3.0.6.0 : ghostscript (EulerOS-SA-2022-2558)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for...

EulerOS Virtualization 3.0.6.0 : compat-openssl (EulerOS-SA-2022-2548)

According to the versions of the compat-openssl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash...

EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2022-2577)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend...

EulerOS Virtualization 3.0.6.0 : libinput (EulerOS-SA-2022-2569)

According to the versions of the libinput package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A format string vulnerability was found in libinput CVE-2022-1215 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 3.0.6.0 : numpy (EulerOS-SA-2022-2575)

According to the versions of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Deni...

EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2022-2568)

According to the versions of the libarchive packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target o...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2022-2546)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer...

EulerOS Virtualization 3.0.6.0 : polkit (EulerOS-SA-2022-2583)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...

EulerOS Virtualization 3.0.6.0 : openjpeg2 (EulerOS-SA-2022-2576)

According to the versions of the openjpeg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - OpenJPEG 2.3.0 has a NULL pointer dereference for 'red' in the imagetopnm function of jp2/convert.c CVE-2018-18088 -...

EulerOS Virtualization 3.0.6.0 : glibc (EulerOS-SA-2022-2560)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgro...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2022-2551)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...