EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2021-1627)

According to the version of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as roo...

EulerOS Virtualization 3.0.2.6 : python-lxml (EulerOS-SA-2021-1420)

According to the version of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which...

EulerOS Virtualization for ARM 64 3.0.2.0 : OpenLDAP (EulerOS-SA-2021-1394)

According to the versions of the OpenLDAP packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - OpenLDAP An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate...

EulerOS Virtualization for ARM 64 3.0.2.0 : openssl (EulerOS-SA-2021-1376)

According to the version of the openssl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the...

EulerOS Virtualization 3.0.2.6 : file (EulerOS-SA-2021-1430)

According to the version of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.CVE-2014-962...

EulerOS Virtualization 3.0.6.6 : jbigkit (EulerOS-SA-2021-1486)

According to the version of the jbigkit package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote...

EulerOS Virtualization 3.0.2.6 : gdb (EulerOS-SA-2021-1432)

According to the versions of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the dotype function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service segmentation...

EulerOS Virtualization 3.0.6.6 : cifs-utils (EulerOS-SA-2021-1463)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject...

EulerOS Virtualization 2.9.1 : mesa (EulerOS-SA-2021-1613)

According to the version of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker...

EulerOS Virtualization 3.0.2.6 : openldap (EulerOS-SA-2021-1417)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An...

EulerOS Virtualization 2.9.1 : python3 (EulerOS-SA-2021-1623)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via...

EulerOS Virtualization 2.9.1 : librepo (EulerOS-SA-2021-1607)

According to the version of the librepo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize pat...

EulerOS Virtualization 2.9.1 : httpd (EulerOS-SA-2021-1602)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge...

EulerOS Virtualization 2.9.1 : glibc (EulerOS-SA-2021-1600)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on...

EulerOS Virtualization 2.9.1 : cryptsetup (EulerOS-SA-2021-1594)

According to the version of the cryptsetup package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is...

EulerOS Virtualization 3.0.2.6 : openssh (EulerOS-SA-2021-1445)

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiatio...

EulerOS Virtualization 2.9.1 : krb5 (EulerOS-SA-2021-1605)

According to the version of the krb5 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because...

EulerOS Virtualization 2.9.1 : python-pip (EulerOS-SA-2021-1624)

According to the version of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a...

EulerOS Virtualization for ARM 64 3.0.2.0 : mariadb (EulerOS-SA-2021-1391)

According to the version of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are...

EulerOS Virtualization for ARM 64 3.0.2.0 : tcpdump (EulerOS-SA-2021-1381)

According to the version of the tcpdump package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.CVE-2020-8037 Note that Tenab...