13660 matches found
USN-6149-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...
EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2023-2101)
According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow...
EulerOS Virtualization 2.11.0 : glibc (EulerOS-SA-2023-2121)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function...
EulerOS Virtualization 2.11.1 : edk2 (EulerOS-SA-2023-2083)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of...
EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2023-2127)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext...
EulerOS Virtualization 2.11.0 : apr (EulerOS-SA-2023-2115)
According to the versions of the apr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond...
EulerOS Virtualization 2.11.1 : python-wheel (EulerOS-SA-2023-2060)
According to the versions of the python-wheel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of...
EulerOS Virtualization 2.11.0 : tar (EulerOS-SA-2023-2131)
According to the versions of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitati...
EulerOS Virtualization 2.11.0 : pixman (EulerOS-SA-2023-2092)
According to the versions of the pixman package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an...
EulerOS Virtualization 2.11.1 : net-snmp (EulerOS-SA-2023-2057)
According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can...
EulerOS Virtualization 2.11.1 : glibc (EulerOS-SA-2023-2069)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function...
EulerOS Virtualization 2.11.1 : python-pillow (EulerOS-SA-2023-2047)
According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow...
EulerOS Virtualization 2.11.0 : gnutls (EulerOS-SA-2023-2122)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be...
EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2023-2126)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For user...
EulerOS Virtualization 2.11.0 : systemd (EulerOS-SA-2023-2113)
According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...
EulerOS Virtualization 2.11.0 : net-snmp (EulerOS-SA-2023-2109)
According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can...
EulerOS Virtualization 2.11.0 : tpm2-tss (EulerOS-SA-2023-2114)
According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Sta...
EulerOS Virtualization 2.11.0 : dhcp (EulerOS-SA-2023-2087)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND...
EulerOS Virtualization 2.11.1 : tar (EulerOS-SA-2023-2079)
According to the versions of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitati...
EulerOS Virtualization 2.11.0 : sqlite (EulerOS-SA-2023-2104)
According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the...