EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2021-2163)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a...

EulerOS Virtualization 3.0.2.2 : keepalived (EulerOS-SA-2021-2139)

According to the version of the keepalived package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or...

EulerOS Virtualization 3.0.2.2 : dnsmasq (EulerOS-SA-2021-2134)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the...

EulerOS Virtualization 3.0.2.2 : python-ecdsa (EulerOS-SA-2021-2161)

According to the version of the python-ecdsa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - This is an easy-to-use implementation of ECDSA cryptography Elliptic Curve Digital Signature Algorithm, implemented purely in...

EulerOS Virtualization 3.0.2.2 : sqlite3 (EulerOS-SA-2021-2169)

According to the version of the sqlite3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c.CVE-2020-13434 Note that Tenable Network Security ha...

EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2021-2157)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment...

EulerOS Virtualization 3.0.2.2 : bindutils (EulerOS-SA-2021-2128)

According to the versions of the bindutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32,...

EulerOS Virtualization 3.0.2.2 : curl (EulerOS-SA-2021-2132)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.CVE-2020-8231 - curl...

EulerOS Virtualization 3.0.2.2 : python (EulerOS-SA-2021-2159)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if...

EulerOS Virtualization 3.0.2.2 : unbound (EulerOS-SA-2021-2172)

According to the versions of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local...

EulerOS Virtualization 3.0.2.2 : python-lxml (EulerOS-SA-2021-2162)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct...

EulerOS Virtualization 3.0.2.2 : ksh (EulerOS-SA-2021-2142)

According to the version of the ksh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to...

EulerOS Virtualization 3.0.2.2 : lldpad (EulerOS-SA-2021-2147)

According to the version of the lldpad package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This...

EulerOS Virtualization 3.0.2.2 : libtiff (EulerOS-SA-2021-2145)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via...

EulerOS Virtualization 3.0.2.2 : grub2 (EulerOS-SA-2021-2126)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any...

EulerOS Virtualization 3.0.2.2 : libcroco (EulerOS-SA-2021-2143)

According to the version of the libcroco package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption.CVE-2020-12825...

EulerOS Virtualization 3.0.2.2 : mariadb (EulerOS-SA-2021-2148)

According to the version of the mariadb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prio...

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2021-2167)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Onigmo through 6.2.0 has a NULL pointer dereference in onigerrorcodetostr because of fetchtoken in regparse.c.CVE-2019-16161 - Onig...

EulerOS Virtualization 3.0.2.2 : trousers (EulerOS-SA-2021-2171)

According to the versions of the trousers package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss use...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2021-2140)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A memory leak in the ath10kusbhiftxsg function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows...