EulerOS Virtualization 2.11.1 : python-cryptography (EulerOS-SA-2023-2740)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2023-3068)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it h...

EulerOS Virtualization 2.11.1 : lua (EulerOS-SA-2023-2732)

According to the versions of the lua package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. CVE-2021-45985 Note that Tenab...

EulerOS Virtualization 2.11.1 : glib2 (EulerOS-SA-2023-2723)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Tenable Network Security has extracted the precedin...

EulerOS Virtualization 3.0.6.0 : freetype (EulerOS-SA-2023-3429)

According to the versions of the freetype packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

EulerOS Virtualization 2.9.0 : procps-ng (EulerOS-SA-2023-3106)

According to the versions of the procps-ng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...

EulerOS Virtualization 3.0.6.0 : compat-openssl10 (EulerOS-SA-2023-3423)

According to the versions of the compat-openssl10 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impa...

EulerOS Virtualization 2.11.0 : libX11 (EulerOS-SA-2023-3073)

According to the versions of the libX11 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that t...

EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2023-3461)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion...

EulerOS Virtualization 2.11.1 : gawk (EulerOS-SA-2023-3357)

According to the versions of the gawk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2023-2992)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact...

EulerOS Virtualization 2.11.0 : openldap (EulerOS-SA-2023-2766)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2024-1021)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when...

EulerOS Virtualization 3.0.6.0 : bind (EulerOS-SA-2023-3419)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it h...

EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-3082)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special file...

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2023-3486)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository...

EulerOS Virtualization 2.11.0 : libwebp (EulerOS-SA-2023-2761)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to...

EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2024-1042)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in...

EulerOS Virtualization 2.11.0 : libcap (EulerOS-SA-2023-2756)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause...

EulerOS Virtualization 2.11.1 : c-ares (EulerOS-SA-2023-3049)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will...