EulerOS 2.0 SP8 : hesiod (EulerOS-SA-2022-1348)

According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the '.athena.mit.edu' default domain when opening the configuration fil...

CVE-2016-10151: Undefined Security Weakness

The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...