EulerOS Virtualization 3.0.6.0 : NetworkManager (EulerOS-SA-2020-1722)

According to the version of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An information exposure vulnerability has been found in NetworkManager when dnsmasq is used in DNS processing mode. An...

EulerOS Virtualization 3.0.6.0 : cairo (EulerOS-SA-2020-1735)

According to the version of the cairo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because o...

EulerOS Virtualization 3.0.6.0 : edk (EulerOS-SA-2020-1791)

According to the versions of the edk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL Pointer Dereference in matchat in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by...

EulerOS Virtualization 3.0.6.0 : kvm (EulerOS-SA-2020-1792)

According to the versions of the kvm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2020-1762)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. Wh...

EulerOS Virtualization 3.0.6.0 : libtasn1 (EulerOS-SA-2020-1769)

According to the version of the libtasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The asn1checkidentifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted inp...

EulerOS Virtualization 3.0.6.0 : icu (EulerOS-SA-2020-1777)

According to the version of the icu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based...

EulerOS Virtualization 3.0.6.0 : haproxy (EulerOS-SA-2020-1757)

According to the version of the haproxy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the 'chunked' value...

EulerOS Virtualization 3.0.6.0 : ghostscript (EulerOS-SA-2020-1738)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...

EulerOS Virtualization 3.0.6.0 : ppp (EulerOS-SA-2020-1775)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to 'access...

EulerOS Virtualization 3.0.6.0 : blktrace (EulerOS-SA-2020-1734)

According to the version of the blktrace package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

EulerOS Virtualization 3.0.6.0 : wpa_supplicant (EulerOS-SA-2020-1763)

According to the versions of the wpasupplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable...

EulerOS Virtualization 3.0.6.0 : libdb (EulerOS-SA-2020-1742)

According to the version of the libdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem...

EulerOS Virtualization 3.0.6.0 : flex (EulerOS-SA-2020-1755)

According to the version of the flex package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a deni...

EulerOS Virtualization 3.0.6.0 : nss (EulerOS-SA-2020-1718)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a...

EulerOS Virtualization 3.0.6.0 : python-requests (EulerOS-SA-2020-1753)

According to the version of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostna...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2020-1715)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash...

EulerOS Virtualization 3.0.6.0 : less (EulerOS-SA-2020-1770)

According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8...

EulerOS Virtualization 3.0.6.0 : ntp (EulerOS-SA-2020-1723)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic...

EulerOS Virtualization 3.0.6.0 : libvorbis (EulerOS-SA-2020-1772)

According to the versions of the libvorbis package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An invalid free flaw was found in the way libvorbis handled processing of Ogg Vorbis format files. This flaw could potentially ...