EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2024-1355)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2024-1382)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a...

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2024-1380)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

EulerOS Virtualization 2.10.1 : python-configobj (EulerOS-SA-2024-1367)

According to the versions of the python-configobj package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate...

EulerOS Virtualization 2.10.0 : python-configobj (EulerOS-SA-2024-1388)

According to the versions of the python-configobj package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate...

EulerOS Virtualization 2.10.0 : zlib (EulerOS-SA-2024-1394)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...

EulerOS Virtualization 2.10.0 : binutils (EulerOS-SA-2024-1375)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Binutils. The use of an uninitialized field in the struct module module may lead to application crash and...

EulerOS Virtualization 2.10.1 : nghttp2 (EulerOS-SA-2024-1365)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams...

EulerOS Virtualization 2.10.1 : zlib (EulerOS-SA-2024-1373)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...

EulerOS Virtualization 2.10.1 : gdb (EulerOS-SA-2024-1356)

According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at...

EulerOS Virtualization 2.10.1 : shim (EulerOS-SA-2024-1371)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 2.10.1 : binutils (EulerOS-SA-2024-1354)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Binutils. The use of an uninitialized field in the struct module module may lead to application crash and...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2024-1392)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 3.0.6.0 : openssh (EulerOS-SA-2023-3440)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code...

EulerOS Virtualization 2.10.0 : python3 (EulerOS-SA-2023-3481)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It...

EulerOS Virtualization 2.11.0 : scipy (EulerOS-SA-2023-3080)

According to the versions of the scipy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2023-2929)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special file...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-2748)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Field thebfd of asymbol is uninitialized in function bfdmachogetsyntheticsymtab.CVE-2023-25588 Field filetable of struct module...

EulerOS Virtualization 2.9.0 : krb5 (EulerOS-SA-2023-3100)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote...

EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2023-2965)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...