EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2023-2814)

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values...

EulerOS Virtualization 2.11.1 : python-requests (EulerOS-SA-2023-2741)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2023-3425)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when...

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2023-2805)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords...

EulerOS Virtualization 2.9.0 : syslinux (EulerOS-SA-2023-3110)

According to the versions of the syslinux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...

EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2023-3507)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

EulerOS Virtualization 2.11.0 : python3 (EulerOS-SA-2023-2770)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assist...

EulerOS Virtualization 2.10.0 : libX11 (EulerOS-SA-2023-2938)

According to the versions of the libX11 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that t...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2023-3327)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2023-3409)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509...

Vulnerabilities in EDK2 NetworkPkg IP stack implementation.

Overview Multiple vulnerabilities were discovered in the TCP/IP stack NetworkPkg of Tianocore EDKII, an open source implementation of Unified Extensible Firmware Interface UEFI. Researchers at Quarkslab have identified a total of 9 vulnerabilities that if exploited via network can lead to remote...

EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1065)

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an...

EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2023-3374)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there...

EulerOS 2.0 SP8 : freetype (EulerOS-SA-2023-3125)

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation...

EulerOS 2.0 SP10 : libwebp (EulerOS-SA-2023-3186)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds...

EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2023-3022)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showe...

EulerOS Virtualization 2.11.1 : curl (EulerOS-SA-2023-3355)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there...

EulerOS Virtualization 3.0.6.6 : perl-HTTP-Tiny (EulerOS-SA-2023-3411)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS...

EulerOS Virtualization 2.9.1 : perl (EulerOS-SA-2023-3091)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Tenable...

EulerOS 2.0 SP9 : procps-ng (EulerOS-SA-2023-2886)

According to the versions of the procps-ng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimite...