EulerOS Virtualization 2.10.0 : polkit (EulerOS-SA-2022-2033)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...

EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2022-2125)

According to the versions of the zlib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2028)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

EulerOS Virtualization 2.10.0 : gzip (EulerOS-SA-2022-2089)

According to the versions of the gzip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gzip: arbitrary-file-write vulnerability CVE-2022-1271 Note that Tenable Network Security has extracted the preceding description...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2022-2076)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - glibc: Off-by-one buffer overflow/underflow in getcwd CVE-2021-3999 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2056)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2022-2100)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps...

EulerOS Virtualization 2.10.0 : libvirt (EulerOS-SA-2022-2045)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2085)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network...

EulerOS Virtualization 2.10.0 : openssh (EulerOS-SA-2022-2097)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but...

EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2022-2119)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2022-2083)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchNormalTag in tifdirread.c in libtiff versions up to...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2022-2047)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-...

EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2022-2113)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer...

EulerOS Virtualization 2.10.1 : gzip (EulerOS-SA-2022-2109)

According to the versions of the gzip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gzip: arbitrary-file-write vulnerability CVE-2022-1271 Note that Tenable Network Security has extracted the preceding description...

EulerOS Virtualization 2.10.1 : edk2 (EulerOS-SA-2022-2072)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently bric...

EulerOS Virtualization 2.10.0 : util-linux (EulerOS-SA-2022-2041)

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

EulerOS Virtualization 2.10.0 : python-lxml (EulerOS-SA-2022-2036)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html...

EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2022-2118)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by...

EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2022-2038)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be...