28988 matches found
EulerOS 2.0 SP11 : python3 (EulerOS-SA-2025-1143)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted...
EulerOS 2.0 SP11 : pam (EulerOS-SA-2025-1161)
According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending...
EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2025-1171)
According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger...
EulerOS 2.0 SP11 : golang (EulerOS-SA-2025-1138)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.CVE-2024-3415...
EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1156)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...
EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1160)
According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored,...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-1174)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.CVE-2024-3415...
EulerOS 2.0 SP12 : unbound (EulerOS-SA-2025-1199)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ubctxsetfwd function in Unbound. This issue could allow an attacker who can invoke specific...
EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2025-1184)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigge...
EulerOS 2.0 SP11 : python3 (EulerOS-SA-2025-1162)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted...
EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1173)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...
EulerOS 2.0 SP12 : python3 (EulerOS-SA-2025-1195)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted...
EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2025-1177)
According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored,...
EulerOS 2.0 SP11 : subversion (EulerOS-SA-2025-1167)
According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...
EulerOS 2.0 SP12 : python-configobj (EulerOS-SA-2025-1196)
According to the versions of the python-configobj package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate function, using...
EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1168)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigge...
EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2025-1137)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...
EulerOS 2.0 SP11 : python-jinja2 (EulerOS-SA-2025-1145)
According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format...
EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-1189)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for...
EulerOS 2.0 SP12 : expat (EulerOS-SA-2025-1188)
According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an...