EulerOS Virtualization 3.0.6.6 : libarchive (EulerOS-SA-2023-2427)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL...

EulerOS Virtualization 3.0.6.6 : perl (EulerOS-SA-2023-2432)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Tenable Network Security has extracted the preceding...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : dhcp (EulerOS-SA-2023-2209)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, i...

EulerOS Virtualization 3.0.6.0 : zlib (EulerOS-SA-2023-2205)

According to the versions of the zlib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra fiel...

EulerOS Virtualization 3.0.6.0 : sudo (EulerOS-SA-2023-2250)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...

EulerOS Virtualization 3.0.6.0 : gnupg2 (EulerOS-SA-2023-2199)

According to the versions of the gnupg2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and oth...

EulerOS Virtualization 3.0.6.0 : libtar (EulerOS-SA-2023-2224)

According to the versions of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues ...

EulerOS Virtualization 3.0.6.0 : samba (EulerOS-SA-2023-2231)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 - A flaw was found in Samba. The security vulnerability occurs whe...

EulerOS Virtualization 3.0.6.0 : pkgconf (EulerOS-SA-2023-2244)

According to the versions of the pkgconf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in...

EulerOS Virtualization 3.0.6.0 : python2 (EulerOS-SA-2023-2214)

According to the versions of the python2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system...

EulerOS Virtualization 3.0.6.0 : emacs (EulerOS-SA-2023-2237)

According to the versions of the emacs packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because...

EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2023-2243)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a...

EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2023-2234)

According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due ...

EulerOS Virtualization 3.0.6.0 : ruby (EulerOS-SA-2023-2248)

According to the versions of the ruby package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2023-2235)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow a...

EulerOS Virtualization 3.0.6.0 : rpm (EulerOS-SA-2023-2230)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a 'binding signature.' RPM...

EulerOS Virtualization 3.0.6.0 : libvirt (EulerOS-SA-2023-2256)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using...

EulerOS Virtualization 3.0.6.0 : libksba (EulerOS-SA-2023-2210)

According to the versions of the libksba package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be...

EulerOS Virtualization 3.0.6.0 : net-snmp (EulerOS-SA-2023-2254)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can...