EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-2213)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the...

EulerOS Virtualization 2.9.1 : glibc (EulerOS-SA-2022-2179)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - glibc: Off-by-one buffer overflow/underflow in getcwd CVE-2021-3999 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2022-2186)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2022-2194)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the...

EulerOS Virtualization 2.9.0 : cyrus-sasl (EulerOS-SA-2022-2196)

According to the versions of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...

EulerOS Virtualization 2.9.1 : shim (EulerOS-SA-2022-2190)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

EulerOS Virtualization 2.9.1 : python-paramiko (EulerOS-SA-2022-2189)

According to the versions of the python-paramiko package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow...

EulerOS Virtualization 2.9.1 : expat (EulerOS-SA-2022-2178)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character ...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2022-2201)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

EulerOS Virtualization 2.9.1 : unzip (EulerOS-SA-2022-2191)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

EulerOS Virtualization 2.9.0 : libxml2 (EulerOS-SA-2022-2202)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Note that Tenable Network...

EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2022-2183)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Note that Tenable Network...

EulerOS Virtualization 2.9.1 : protobuf (EulerOS-SA-2022-2188)

According to the versions of the protobuf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked ca...

EulerOS Virtualization 2.9.0 : glibc (EulerOS-SA-2022-2198)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - glibc: Off-by-one buffer overflow/underflow in getcwd CVE-2021-3999 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.9.0 : expat (EulerOS-SA-2022-2197)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character ...

EulerOS Virtualization 3.0.2.0 : numpy (EulerOS-SA-2022-1684)

According to the versions of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Servi...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2022-2076)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - glibc: Off-by-one buffer overflow/underflow in getcwd CVE-2021-3999 Note that Tenable Network Security has extracted the preceding...

EulerOS Virtualization 2.10.1 : edk2 (EulerOS-SA-2022-2072)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently bric...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2085)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network...

EulerOS Virtualization 2.10.0 : cyrus-sasl (EulerOS-SA-2022-2021)

According to the versions of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...