EulerOS 2.0 SP8 : openssh (EulerOS-SA-2020-1170)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target...

EulerOS 2.0 SP8 : fribidi (EulerOS-SA-2020-1149)

According to the version of the fribidi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a...

EulerOS 2.0 SP8 : libxslt (EulerOS-SA-2020-1166)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafte...

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2020-1150)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privilege...

EulerOS 2.0 SP8 : keepalived (EulerOS-SA-2020-1157)

According to the version of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This...

EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2020-1182)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker...

EulerOS 2.0 SP8 : git (EulerOS-SA-2020-1151)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The...

EulerOS 2.0 SP8 : librabbitmq (EulerOS-SA-2020-1163)

According to the version of the librabbitmq package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory...

EulerOS 2.0 SP8 : python-urllib3 (EulerOS-SA-2020-1177)

According to the version of the python-urllib3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.CVE-2019-11236...

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1180)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls...

EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2020-1159)

According to the version of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. F...

EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2020-1013)

According to the version of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2020-1008)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Go before 1.10.6 and 1.11.x before 1.11.3, the 'go get' command is vulnerable to directory traversal when executed with the import path of a...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2020-1003)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory...

EulerOS 2.0 SP8 : bind (EulerOS-SA-2019-2275)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -...

EulerOS 2.0 SP8 : binutils (EulerOS-SA-2019-2276)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow...

EulerOS 2.0 SP8 : lz4 (EulerOS-SA-2019-2291)

According to the version of the lz4 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with ...

EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2019-2281)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.CVE-2019-13137 - ImageMagick before...

EulerOS 2.0 SP8 : libmspack (EulerOS-SA-2019-2285)

According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the '/\0'...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-2277)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...