Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-2231)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for blktrace (EulerOS-SA-2020-2217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2020-2200)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attacke...

EulerOS Virtualization 3.0.2.2 : unbound (EulerOS-SA-2020-2195)

According to the version of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a...

EulerOS Virtualization 3.0.2.2 : less (EulerOS-SA-2020-2212)

According to the version of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An out of bound read, with a maximum of 5 bytes, was found in the way the isutf8wellformed function parsed UTF-8 characters. If less wa...

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2020-2227)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.CVE-2020-5312 Note that Tenable Network Securit...

EulerOS Virtualization 3.0.2.2 : blktrace (EulerOS-SA-2020-2217)

According to the version of the blktrace package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

EulerOS Virtualization 3.0.2.2 : libtasn1 (EulerOS-SA-2020-2210)

According to the version of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The asn1checkidentifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted inpu...

EulerOS Virtualization 3.0.2.2 : binutils (EulerOS-SA-2020-2226)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU...

EulerOS Virtualization 3.0.2.2 : ncurses (EulerOS-SA-2020-2207)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to...

EulerOS Virtualization 3.0.2.2 : libcgroup (EulerOS-SA-2020-2192)

According to the version of the libcgroup package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure...

EulerOS Virtualization 3.0.2.2 : perl-File-Path (EulerOS-SA-2020-2203)

According to the version of the perl-File-Path package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set th...

EulerOS Virtualization 3.0.2.2 : python-requests (EulerOS-SA-2020-2201)

According to the version of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostna...

EulerOS Virtualization 3.0.2.2 : nss (EulerOS-SA-2020-2205)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a...

EulerOS Virtualization 3.0.2.2 : shadow-utils (EulerOS-SA-2020-2198)

According to the version of the shadow-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that...

EulerOS Virtualization 3.0.2.2 : libvirt (EulerOS-SA-2020-2209)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - qemu/qemudriver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows...

EulerOS Virtualization 3.0.2.2 : bash (EulerOS-SA-2020-2218)

According to the version of the bash package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in disableprivmode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective U...

EulerOS Virtualization 3.0.2.2 : sqlite (EulerOS-SA-2020-2197)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the...

EulerOS Virtualization 3.0.2.2 : lz4 (EulerOS-SA-2020-2191)

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

EulerOS Virtualization 3.0.2.2 : cpio (EulerOS-SA-2020-2216)

According to the version of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...