EulerOS 2.0 SP8 : rpm (EulerOS-SA-2021-1992)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, a...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2021-1979)

According to the version of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow wa...

EulerOS 2.0 SP8 : ruby (EulerOS-SA-2021-1987)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorre...

EulerOS 2.0 SP8 : screen (EulerOS-SA-2021-1888)

According to the version of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly...

EulerOS 2.0 SP8 : php (EulerOS-SA-2021-1883)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP...

EulerOS 2.0 SP8 : docker-engine (EulerOS-SA-2021-1869)

According to the version of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashe...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1879)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when...

EulerOS 2.0 SP8 : openssl (EulerOS-SA-2021-1882)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data...

EulerOS 2.0 SP8 : ceph (EulerOS-SA-2021-1866)

According to the version of the ceph packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr log...

EulerOS 2.0 SP8 : php (EulerOS-SA-2021-1163)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FILTERVALIDATEURL accepts URLs with invalid userinfoCVE-2020-7071 Note that Tenable Network Security has extracted the preceding description block...

EulerOS 2.0 SP8 : ceph (EulerOS-SA-2021-1136)

According to the versions of the ceph packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Ope...

EulerOS 2.0 SP8 : PyYAML (EulerOS-SA-2021-1168)

According to the version of the PyYAML packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - YAML is a data serialization format designed for human readability andinteraction with scripting languages. PyYAML is a YAML parser andemitter for...

EulerOS 2.0 SP8 : glib-networking (EulerOS-SA-2021-1143)

According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS...

EulerOS 2.0 SP8 : perl-Convert-ASN1 (EulerOS-SA-2021-1162)

According to the version of the perl-Convert-ASN1 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected...

EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1159)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

EulerOS 2.0 SP8 : p11-kit (EulerOS-SA-2021-1161)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2021-1172)

According to the version of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid and the default certificate...

EulerOS 2.0 SP8 : python-lxml (EulerOS-SA-2021-1166)

According to the version of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2021-1137)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP...

EulerOS 2.0 SP8 : libdb (EulerOS-SA-2021-1150)

According to the version of the libdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior ...