EulerOS 2.0 SP3 : perl (EulerOS-SA-2020-1421)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item...

Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)

Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Tested Version: 4.2.2.0 Vulnerability Type: Denial of Service...

PT-2020-15137 · Osca +1 · Osca-550A +3

Name of the Vulnerable Software and Affected Versions: HEGE-560 version 1.0.1.21SP3 HEGE-570 version 1.0.1.22SP3 OSCA-550 version 1.0.1.21SP3 OSCA-550A version 1.0.1.21SP3 OSCA-550AX version 1.0.1.21SP3 OSCA-550X version 1.0.1.21SP3 Description: The software of the affected products has an improp...

EulerOS 2.0 SP3 : gdk-pixbuf2 (EulerOS-SA-2019-2585)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and applicati...

EulerOS 2.0 SP3 : ed (EulerOS-SA-2019-2572)

According to the version of the ed package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free.CVE-2017-535...

EulerOS 2.0 SP3 : fence-agents (EulerOS-SA-2019-2577)

According to the version of the fence-agents packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would...

EulerOS 2.0 SP3 : dcraw (EulerOS-SA-2019-2567)

According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image,...

EulerOS 2.0 SP3 : bzip2 (EulerOS-SA-2019-2560)

According to the version of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service crash via a crafted bzip2 file,...

EulerOS 2.0 SP3 : exempi (EulerOS-SA-2019-2575)

According to the versions of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote...

EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2019-2562)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...

EulerOS 2.0 SP3 : bind (EulerOS-SA-2019-2557)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 'managed-keys' is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for us...

EulerOS 2.0 SP3 : pcre (EulerOS-SA-2019-2646)

According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a...

EulerOS 2.0 SP3 : libidn (EulerOS-SA-2019-2608)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers...

EulerOS 2.0 SP3 : gnupg2 (EulerOS-SA-2019-2589)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in...

EulerOS 2.0 SP3 : wavpack (EulerOS-SA-2019-2680)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...

EulerOS 2.0 SP3 : xdelta (EulerOS-SA-2019-2682)

According to the version of the xdelta package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a...

EulerOS 2.0 SP3 : libXvMC (EulerOS-SA-2019-2628)

According to the version of the libXvMC package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.CVE-2016-7953 Note that...

EulerOS 2.0 SP3 : libgxps (EulerOS-SA-2019-2606)

According to the version of the libgxps package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial o...

EulerOS 2.0 SP3 : rpm (EulerOS-SA-2019-2658)

According to the version of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownershi...

EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-2636)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...