EulerOS 2.0 SP8 : libxslt (EulerOS-SA-2019-2290)

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened...

EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2019-2098)

According to the versions of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some...

EulerOS 2.0 SP8 : SDL (EulerOS-SA-2019-2117)

According to the version of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized...

EulerOS 2.0 SP8 : elfutils (EulerOS-SA-2019-2102)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2019-2101)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481 - Heap buffer overflow in the TFTP protocol handler in...

EulerOS 2.0 SP8 : openssh (EulerOS-SA-2019-2113)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle...

EulerOS 2.0 SP8 : openldap (EulerOS-SA-2019-2112)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-2072)

According to the version of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a...

EulerOS 2.0 SP8 : squashfs-tools (EulerOS-SA-2019-2092)

According to the versions of the squashfs-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the readfragmenttable4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial o...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2019-2080)

According to the version of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/',...

EulerOS 2.0 SP8 : nmap (EulerOS-SA-2019-2085)

According to the version of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leadin...

EulerOS 2.0 SP8 : glib2 (EulerOS-SA-2019-2077)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in...

EulerOS 2.0 SP8 : poppler (EulerOS-SA-2019-1827)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow,...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-1830)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service...

EulerOS 2.0 SP8 : dhcp (EulerOS-SA-2019-1826)

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS CVE-2019-6470 Note that Tenable Network Security...

EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2019-1831)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The function WavpackVerifySingleBlock in openutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2019-1766)

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text fi...

EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2019-1772)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory...

EulerOS 2.0 SP8 : unzip (EulerOS-SA-2019-1773)

According to the version of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - unzip: Buffer overflow in list.c resulting in a denial of service.CVE-2018-18384 Note that Tenable Network Security has extracted the preceding...

EulerOS 2.0 SP8 : bzip2 (EulerOS-SA-2019-1782)

According to the version of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.CVE-2019-12900 Note that Tenable Netwo...