EulerOS Virtualization 3.0.2.6 : libwebp (EulerOS-SA-2021-2859)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The...

EulerOS Virtualization 3.0.2.6 : openssl098e (EulerOS-SA-2021-2872)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where t...

EulerOS Virtualization 3.0.2.6 : NetworkManager (EulerOS-SA-2021-2862)

According to the versions of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can caus...

EulerOS Virtualization 3.0.2.6 : sssd (EulerOS-SA-2021-2880)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire...

EulerOS Virtualization 3.0.2.6 : curl (EulerOS-SA-2021-2894)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in...

EulerOS Virtualization 3.0.2.6 : perl-DBI (EulerOS-SA-2021-2908)

According to the versions of the perl-DBI package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those...

EulerOS Virtualization 3.0.2.6 : python (EulerOS-SA-2021-2875)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in...

EulerOS Virtualization 3.0.2.6 : dhcp (EulerOS-SA-2021-2860)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower...

EulerOS Virtualization 3.0.2.6 : flac (EulerOS-SA-2021-2879)

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could...

EulerOS Virtualization 3.0.2.6 : qemu-kvm (EulerOS-SA-2021-2855)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - sdwpaddr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhciwrite...

EulerOS Virtualization 3.0.2.6 : krb5 (EulerOS-SA-2021-2858)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in...

EulerOS Virtualization 3.0.2.6 : systemd (EulerOS-SA-2021-2863)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a...

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2021-2881)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp...

EulerOS Virtualization 3.0.2.6 : PyYAML (EulerOS-SA-2021-2902)

According to the versions of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution...

EulerOS Virtualization 3.0.2.6 : libldb (EulerOS-SA-2021-2896)

According to the versions of the libldb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN...

EulerOS Virtualization 3.0.2.6 : lz4 (EulerOS-SA-2021-2892)

According to the versions of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer...

EulerOS Virtualization 3.0.2.6 : bind (EulerOS-SA-2021-2867)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration...

EulerOS Virtualization 3.0.2.6 : httpd (EulerOS-SA-2021-2878)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in modauthdigest. There is...

EulerOS Virtualization 3.0.2.6 : libjpeg-turbo (EulerOS-SA-2021-2865)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libjpeg-turbo all version have a stack-based buffer overflow in the 'transform' component. A remote attacker can send a...

EulerOS Virtualization 3.0.2.6 : tar (EulerOS-SA-2021-2861)

According to the versions of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar t...