Oracle Virtualization: Input validation error vulnerability

Oracle Virtualization is a suite of virtualization solutions from Oracle. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization from the desktop to the data center. Oracle Virtualization suffers from a...

Oracle Virtualization: Input validation error vulnerability

Oracle Virtualization is a virtualization solution from Oracle Corporation. It is used to unify and manage the entire hardware and software architecture from the application to the disk. Oracle Virtualization has a security vulnerability that could be exploited by an attacker to cause Oracle VM...

Tibco Data Virtualization Access Control Vulnerability

Tibco Data Virtualization is a data virtualization platform from Tibco Corporation. An Access Control Error vulnerability exists in Tibco Data Virtualization version 8.5.2 and prior versions, which can be exploited to allow a low-privileged attacker with network access privileges to gain read...

PT-2022-20178

Name of the Vulnerable Software and Affected Versions TIBCO Data Virtualization versions 8.5.2 and below TIBCO Data Virtualization for AWS Marketplace versions 8.5.2 and below Description The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data...

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-2107)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...

EulerOS Virtualization 2.10.0 : grub2 (EulerOS-SA-2022-2074)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing...

EulerOS Virtualization 2.10.1 : gnupg2 (EulerOS-SA-2022-2052)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a...

EulerOS Virtualization 2.10.0 : selinux-policy (EulerOS-SA-2022-2102)

According to the versions of the selinux-policy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the selinux-policy aka Reference Policy package 3.14 through 2020-08-24 because the...

EulerOS Virtualization 2.10.1 : aide (EulerOS-SA-2022-2046)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs...

EulerOS Virtualization 2.10.1 : libvirt (EulerOS-SA-2022-2073)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited...

EulerOS Virtualization 2.10.0 : polkit (EulerOS-SA-2022-2033)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...

EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2022-2125)

According to the versions of the zlib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2028)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

EulerOS Virtualization 2.10.0 : gzip (EulerOS-SA-2022-2089)

According to the versions of the gzip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gzip: arbitrary-file-write vulnerability CVE-2022-1271 Note that Tenable Network Security has extracted the preceding description...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier CVE-2021-47659 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix some memory leaks in an error handling path of 'logreplay'...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2022-2076)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - glibc: Off-by-one buffer overflow/underflow in getcwd CVE-2021-3999 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2056)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2022-2100)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps...

EulerOS Virtualization 2.10.0 : libvirt (EulerOS-SA-2022-2045)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2085)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network...