EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1181)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1163)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name longer than about 515 bytes, the file...

EulerOS Virtualization 2.5.4 : rpm (EulerOS-SA-2019-1210)

According to the version of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that rpm uses temporary files with predictable names when installing an RPM. An attacker with ability to write in a...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1189)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An information leak was discovered in the Linux kernel in cdromioctldrivestatus function in drivers/cdrom/cdrom.c that could be used...

EulerOS Virtualization 2.5.3 : nss (EulerOS-SA-2019-1169)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1178)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1179)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting ...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1220)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel. An attacker with a local account can...

EulerOS Virtualization 2.5.3 : wget (EulerOS-SA-2019-1165)

According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging...

EulerOS Virtualization 2.5.4 : spice-gtk (EulerOS-SA-2019-1200)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that...

EulerOS Virtualization 2.5.4 : net-snmp (EulerOS-SA-2019-1214)

According to the version of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated...

EulerOS Virtualization 2.5.3 : libtasn1 (EulerOS-SA-2019-1190)

According to the version of the libtasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The asn1checkidentifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted inp...

EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1217)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...

EulerOS Virtualization 2.5.3 : ntp (EulerOS-SA-2019-1222)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1227)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

EulerOS Virtualization 2.5.4 : binutils (EulerOS-SA-2019-1219)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version...

EulerOS Virtualization 2.5.3 : dnsmasq (EulerOS-SA-2019-1174)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the DNS code. An attacker could send crafted DNS...

EulerOS Virtualization 2.5.3 : krb5 (EulerOS-SA-2019-1184)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a deni...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1180)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...