EulerOS Virtualization 2.9.0 : rsync (EulerOS-SA-2023-1233)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories ...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2023-1161)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati2dblt routine whi...

EulerOS Virtualization 2.9.1 : rpm (EulerOS-SA-2023-1202)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...

EulerOS Virtualization 2.9.1 : bind (EulerOS-SA-2023-1183)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. ...

EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2023-1162)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...

EulerOS Virtualization 2.9.1 : mariadb-connector-c (EulerOS-SA-2023-1197)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

EulerOS Virtualization 2.10.0 : gcc (EulerOS-SA-2023-1167)

According to the versions of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

EulerOS Virtualization 2.9.0 : gcc (EulerOS-SA-2023-1221)

According to the versions of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

EulerOS Virtualization 2.9.0 : libjpeg-turbo (EulerOS-SA-2023-1224)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

EulerOS Virtualization 2.9.1 : sqlite (EulerOS-SA-2023-1205)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode...

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2023-1143)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent...

EulerOS Virtualization 2.10.1 : libjpeg-turbo (EulerOS-SA-2023-1148)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2023-1151)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int'text', a system...

EulerOS Virtualization 2.9.0 : gnutls (EulerOS-SA-2023-1222)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing...

EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2023-1186)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent...

EulerOS Virtualization 2.10.0 : python3 (EulerOS-SA-2023-1172)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int'text', a system...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to...

EulerOS Virtualization 2.9.1 : libjpeg-turbo (EulerOS-SA-2023-1194)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

EulerOS Virtualization 2.9.1 : python-ldap (EulerOS-SA-2023-1200)

According to the versions of the python-ldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions,...

EulerOS Virtualization 2.9.0 : rpm (EulerOS-SA-2023-1232)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...