EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2020-1478)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : libnl (EulerOS-SA-2020-1490)

According to the version of the libnl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the conte...

EulerOS Virtualization 3.0.2.2 : httpd (EulerOS-SA-2020-1455)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple...

EulerOS Virtualization 3.0.2.2 : binutils (EulerOS-SA-2020-1466)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service NULL pointer dereference and application crash,...

EulerOS Virtualization 3.0.2.2 : krb5 (EulerOS-SA-2020-1467)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic...

EulerOS Virtualization 3.0.2.2 : libX11 (EulerOS-SA-2020-1471)

According to the versions of the libX11 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2020-1452)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic...

EulerOS Virtualization 3.0.2.2 : libcroco (EulerOS-SA-2020-1475)

According to the versions of the libcroco package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED The crtknzrparsergb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an 'outside the range of representable...

EulerOS Virtualization 3.0.2.2 : unbound (EulerOS-SA-2020-1482)

According to the version of the unbound package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC...

EulerOS Virtualization 3.0.2.2 : icu (EulerOS-SA-2020-1454)

According to the versions of the icu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded...

EulerOS Virtualization 3.0.2.2 : avahi (EulerOS-SA-2020-1450)

According to the version of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - avahi-daemon in Avahi through 0.6.32 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which...

EulerOS Virtualization 3.0.2.2 : libXfont (EulerOS-SA-2020-1459)

According to the versions of the libXfont package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as root,...

EulerOS Virtualization 3.0.2.2 : coreutils (EulerOS-SA-2020-1484)

According to the version of the coreutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during...

EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-1488)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-835: Loop wit...

EulerOS Virtualization 3.0.2.2 : http-parser (EulerOS-SA-2020-1486)

According to the versions of the http-parser package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By usin...

EulerOS Virtualization 3.0.2.2 : freetype (EulerOS-SA-2020-1491)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for...

EulerOS Virtualization 3.0.2.2 : lcms2 (EulerOS-SA-2020-1492)

According to the version of the lcms2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a deni...

EulerOS Virtualization 3.0.2.2 : libpng (EulerOS-SA-2020-1496)

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted ima...

EulerOS Virtualization 3.0.2.2 : tar (EulerOS-SA-2020-1449)

According to the version of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an...