EulerOS Virtualization 3.0.6.6 : unbound (EulerOS-SA-2022-1150)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2022-1153)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872 - vim is vulnerable to Use After Free CVE-2021-3796 Not...

EulerOS Virtualization 3.0.6.0 : libgcrypt (EulerOS-SA-2022-1074)

According to the versions of the libgcrypt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

EulerOS Virtualization 3.0.6.0 : libsolv (EulerOS-SA-2022-1077)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver testcasereadPool pool, FILE fp, const char testcase, Queue job...

EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2022-1070)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrmstatefini...

EulerOS Virtualization 3.0.6.6 : squashfs-tools (EulerOS-SA-2022-1147)

According to the versions of the squashfs-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by...

EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2022-1129)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via...

EulerOS Virtualization 3.0.6.0 : python3 (EulerOS-SA-2022-1092)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent...

EulerOS Virtualization 3.0.6.0 : c-ares (EulerOS-SA-2022-1057)

According to the versions of the c-ares packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...

EulerOS Virtualization 3.0.6.6 : python-pillow (EulerOS-SA-2022-1142)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb...

EulerOS Virtualization 3.0.6.0 : python-pip (EulerOS-SA-2022-1091)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly u...

EulerOS Virtualization 3.0.6.0 : gnutls (EulerOS-SA-2022-1067)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other...

EulerOS Virtualization 3.0.6.6 : sssd (EulerOS-SA-2022-1148)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire...

EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2022-1110)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

EulerOS Virtualization 3.0.6.6 : hivex (EulerOS-SA-2022-1123)

According to the versions of the hivex packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen...

EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2022-1076)

According to the versions of the libsndfile packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code vi...

EulerOS Virtualization 3.0.6.6 : flac (EulerOS-SA-2022-1118)

According to the versions of the flac packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This coul...

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2022-1103)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3770 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2022-1115)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update...

EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2022-1139)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...