EulerOS Virtualization 2.10.1 : libcap (EulerOS-SA-2023-2917)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the inp...

EulerOS Virtualization 2.9.0 : perl (EulerOS-SA-2023-2993)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuratio...

EulerOS Virtualization 2.10.0 : json-c (EulerOS-SA-2023-3472)

According to the versions of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in...

EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2023-2978)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a...

EulerOS Virtualization 2.11.0 : openssh (EulerOS-SA-2023-3074)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code...

EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2023-3510)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing...

EulerOS Virtualization 2.10.1 : perl-HTTP-Tiny (EulerOS-SA-2023-2925)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-2986)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965...

EulerOS Virtualization 2.11.1 : glib2 (EulerOS-SA-2023-2723)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Tenable Network Security has extracted the precedin...

EulerOS Virtualization 3.0.6.0 : freetype (EulerOS-SA-2023-3429)

According to the versions of the freetype packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

EulerOS Virtualization 2.11.1 : python3 (EulerOS-SA-2023-2739)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assist...

EulerOS Virtualization 2.9.0 : procps-ng (EulerOS-SA-2023-3106)

According to the versions of the procps-ng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2024-1029)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function...

EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2023-3364)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2023-3479)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

EulerOS Virtualization 3.0.6.6 : libxml2 (EulerOS-SA-2023-3404)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a...

EulerOS Virtualization 2.11.1 : sysstat (EulerOS-SA-2023-2745)

According to the versions of the sysstat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of ...

EulerOS Virtualization 2.9.0 : sysstat (EulerOS-SA-2023-2997)

According to the versions of the sysstat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of ...

EulerOS Virtualization 2.9.0 : glibc (EulerOS-SA-2024-1008)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulti...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2023-3471)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an...