EulerOS Virtualization 3.0.6.0 : less (EulerOS-SA-2020-1770)

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8...

EulerOS Virtualization 3.0.6.0 : nss (EulerOS-SA-2020-1718)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a...

EulerOS Virtualization 3.0.6.0 : python-requests (EulerOS-SA-2020-1753)

According to the version of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostna...

EulerOS Virtualization 3.0.6.0 : wpa_supplicant (EulerOS-SA-2020-1763)

According to the versions of the wpasupplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable...

EulerOS Virtualization 3.0.6.0 : dnsmasq (EulerOS-SA-2020-1776)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of...

EulerOS Virtualization 3.0.6.0 : python-jinja2 (EulerOS-SA-2020-1767)

According to the version of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape.CVE-2019-10906 Note that Tenable Network Security has...

EulerOS Virtualization 3.0.6.0 : lz4 (EulerOS-SA-2020-1771)

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

EulerOS Virtualization 3.0.6.0 : python-pillow (EulerOS-SA-2020-1728)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.CVE-2020-5312 Note that Tenable Network Securit...

EulerOS Virtualization 3.0.6.0 : haproxy (EulerOS-SA-2020-1757)

According to the version of the haproxy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the 'chunked' value...

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2020-1745)

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that the swap file created by vim when opening a file was using the user's primary group instead of the file's group. An...

EulerOS Virtualization 3.0.6.0 : nss-softokn (EulerOS-SA-2020-1754)

According to the versions of the nss-softokn packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. Thi...

EulerOS Virtualization 3.0.6.0 : curl-openssl (EulerOS-SA-2020-1758)

According to the version of the curl-openssl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security...

EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.1.x below 7.1.3...

EulerOS Virtualization 3.0.6.0 : nmap (EulerOS-SA-2020-1781)

According to the version of the nmap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and application...

EulerOS Virtualization 3.0.6.0 : unbound (EulerOS-SA-2020-1783)

According to the version of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a...

EulerOS Virtualization 3.0.6.0 : openldap (EulerOS-SA-2020-1739)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of servic...

EulerOS Virtualization 3.0.6.0 : openssh (EulerOS-SA-2020-1719)

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users ...

EulerOS Virtualization 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-1790)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Memory leak in hw/audio/es1370.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service...

EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2020-1772)

According to the versions of the libvorbis package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially ...

EulerOS Virtualization 3.0.6.0 : libsoup (EulerOS-SA-2020-1748)

According to the version of the libsoup package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - WebCore/platform/network/soup/SocketStreamHandleImplSou p.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior ...