EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1478)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1507)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Linux kernel has an undefined behavior when an argument of INTMIN is passed to the kernel/signal.c:killsomethinginfo function...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1487)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1504)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the Linux kernel where the keyctlsetreqkeykeyring function leaks the thread keyring. This allows an...

EulerOS Virtualization 2.5.3 : qemu-kvm (EulerOS-SA-2019-1368)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An integer overflow issue was found in the NE200 NIC emulation. It could occur while receiving packets from the network, if the si...

EulerOS Virtualization 2.5.4 : qemu-kvm (EulerOS-SA-2019-1373)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An integer overflow issue was found in the NE200 NIC emulation. It could occur while receiving packets from the network, if the si...

EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1361)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that the superexec operator was available in the internal dictionary. A specially crafted PostScript file could use...

EulerOS Virtualization 2.5.3 : ntp (EulerOS-SA-2019-1356)

According to the version of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - NTP through 4.2.8p12 has a NULL Pointer Dereference.i1/4^CVE-2019-8936i1/4%0 Note that Tenable Network Security has extracted the...

EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1364)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that the forceput operator could be extracted from the DefineResource method. A specially crafted PostScript file...

EulerOS Virtualization 2.5.3 : python (EulerOS-SA-2019-1357)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to condu...

EulerOS Virtualization 2.5.3 : libssh2 (EulerOS-SA-2019-1360)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote...

EulerOS Virtualization 2.5.3 : tar (EulerOS-SA-2019-1366)

According to the version of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - paxdecodeheader in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed...

EulerOS Virtualization 2.5.3 : openssh (EulerOS-SA-2019-1355)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1182)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1163)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name longer than about 515 bytes, the file...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1181)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1221)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cach...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page...

EulerOS Virtualization 2.5.3 : libtasn1 (EulerOS-SA-2019-1208)

According to the version of the libtasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1189)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An information leak was discovered in the Linux kernel in cdromioctldrivestatus function in drivers/cdrom/cdrom.c that could be used...