EulerOS 2.0 SP2 : memcached (EulerOS-SA-2019-2391)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault...

EulerOS 2.0 SP2 : exempi (EulerOS-SA-2019-2373)

According to the versions of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote...

EulerOS 2.0 SP5 : ncurses (EulerOS-SA-2019-2544)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before...

EulerOS 2.0 SP5 : libXfont (EulerOS-SA-2019-2539)

According to the versions of the libXfont package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection c...

EulerOS 2.0 SP5 : exempi (EulerOS-SA-2019-2524)

According to the version of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in...

MGASA-2019-0367 Updated tnef packages fix security vulnerability

Updated tnef package fixes security vulnerability: In tnef, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup CVE-2019-18849...

Debian DLA-2020-1 : libonig security update

Several vulnerabilities were discovered in the Oniguruma regular expressions library, notably used in PHP mbstring. CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker...

Debian: Security Advisory (DLA-2020-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : wireshark (EulerOS-SA-2019-2425)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Wireshark is a network traffic analyzer for Unix-ish operating systems.This package lays base for libpcap, a packet capture and filtering...

EulerOS 2.0 SP2 : freetype (EulerOS-SA-2019-2514)

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parseencoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service infinite loop via a...

CentOS Update for tcpdump CESA-2019:3976 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM...

EulerOS 2.0 SP2 : taglib (EulerOS-SA-2019-2482)

According to the versions of the taglib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based...

EulerOS 2.0 SP2 : elfutils (EulerOS-SA-2019-2510)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Divide-by-zero vulnerabilities in the function arlibaddsymbols in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of servic...

EulerOS 2.0 SP2 : libcroco (EulerOS-SA-2019-2520)

According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crtknzrparsecomment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service memory allocation error...

EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2019-2435)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. Th...

EulerOS 2.0 SP2 : netpbm (EulerOS-SA-2019-2426)

According to the versions of the netpbm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service heap-based...

Debian DLA-2005-1 : tnef security update

In tnef, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup. For Debian 8 'Jessie', this problem has been fixed in version...

EulerOS Virtualization for ARM 64 3.0.3.0 : libtiff (EulerOS-SA-2019-2323)

According to the version of the libtiff package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by...

EulerOS Virtualization for ARM 64 3.0.3.0 : elfutils (EulerOS-SA-2019-2313)

According to the versions of the elfutils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and...