EulerOS Virtualization 3.0.6.0 : json-c (EulerOS-SA-2020-1733)

According to the version of the json-c packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by...

EulerOS Virtualization 3.0.6.0 : spdk (EulerOS-SA-2020-1793)

According to the version of the spdk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 whe...

EulerOS Virtualization 3.0.6.0 : libvirt (EulerOS-SA-2020-1789)

According to the version of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - qemu/qemudriver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows...

EulerOS Virtualization 3.0.6.0 : lftp (EulerOS-SA-2020-1756)

According to the version of the lftp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of...

EulerOS Virtualization 3.0.6.0 : cpio (EulerOS-SA-2020-1737)

According to the version of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TA...

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2020-1752)

According to the version of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypte...

EulerOS Virtualization 3.0.6.0 : memcached (EulerOS-SA-2020-1784)

According to the versions of the memcached package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability...

EulerOS Virtualization 3.0.6.0 : pyOpenSSL (EulerOS-SA-2020-1729)

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing...

EulerOS Virtualization 3.0.6.0 : gcc (EulerOS-SA-2020-1726)

According to the version of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted...

EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2020-1751)

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that u...

EulerOS Virtualization 3.0.6.0 : openssl098e (EulerOS-SA-2020-1774)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found in the way OpenSSL handled certain PKCS7 inputs. An attacker able to make an application...

EulerOS Virtualization 3.0.6.0 : sudo (EulerOS-SA-2020-1785)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of ...

EulerOS Virtualization 3.0.6.0 : perl (EulerOS-SA-2020-1744)

According to the version of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a deni...

EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2020-1779)

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or...

EulerOS Virtualization 3.0.6.0 : numpy (EulerOS-SA-2020-1730)

According to the version of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attacker...

EulerOS Virtualization 3.0.6.0 : libcgroup (EulerOS-SA-2020-1731)

According to the version of the libcgroup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosur...

EulerOS Virtualization 3.0.6.0 : libosinfo (EulerOS-SA-2020-1786)

According to the version of the libosinfo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to...

EulerOS Virtualization 3.0.6.0 : spice-gtk (EulerOS-SA-2020-1727)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A...

EulerOS Virtualization 3.0.6.0 : gperftools (EulerOS-SA-2020-1780)

According to the version of the gperftools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE...

EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2020-1732)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before...