EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1159)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

EulerOS 2.0 SP8 : nss-softokn (EulerOS-SA-2020-2523)

According to the versions of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This...

EulerOS 2.0 SP8 : libvncserver (EulerOS-SA-2020-2518)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker cou...

CVE-2020-24444

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 6.4.8.2 have a blind Server-Side Request Forgery SSRF vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems tha...

EulerOS 2.0 SP8 : nss (EulerOS-SA-2020-2478)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages,...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-2323)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed...

EulerOS 2.0 SP8 : ruby (EulerOS-SA-2020-2322)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not...

EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2020-2307)

According to the version of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in dovecot. A remote attacker could cause a denial of service by repeatedly sending emails containing MIME parts containing...

EulerOS 2.0 SP8 : cups (EulerOS-SA-2020-2306)

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain...

EulerOS 2.0 SP8 : perl-DBI (EulerOS-SA-2020-2315)

According to the versions of the perl-DBI package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause...

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-2317)

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

EulerOS 2.0 SP8 : python3 (EulerOS-SA-2020-2318)

According to the version of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

EulerOS 2.0 SP8 : libxml2 (EulerOS-SA-2020-2154)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME project libxml2 v2.9.10 and earlier have a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The iss...

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2020-2153)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker t...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-2159)

According to the version of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a...

EulerOS 2.0 SP8 : trousers (EulerOS-SA-2020-2160)

According to the versions of the trousers packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to...

EulerOS 2.0 SP8 : irssi (EulerOS-SA-2020-1857)

According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the...

EulerOS 2.0 SP8 : icedtea-web (EulerOS-SA-2020-1856)

According to the versions of the icedtea-web package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising th...

EulerOS 2.0 SP8 : python-rsa (EulerOS-SA-2020-1878)

According to the version of the python-rsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g.,...

EulerOS 2.0 SP8 : LibRaw (EulerOS-SA-2020-1864)

According to the versions of the LibRaw package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.CVE-2018-20363 - LibRaw::copybayer in librawcxx.cpp in LibRaw...