EulerOS Virtualization 3.0.6.0 : libcgroup (EulerOS-SA-2020-1731)

According to the version of the libcgroup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosur...

EulerOS Virtualization 3.0.6.0 : shadow-utils (EulerOS-SA-2020-1759)

According to the version of the shadow-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that...

EulerOS Virtualization 3.0.6.0 : binutils (EulerOS-SA-2020-1743)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU...

EulerOS Virtualization 3.0.6.0 : telnet (EulerOS-SA-2020-1765)

According to the version of the telnet package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data,...

EulerOS Virtualization 3.0.6.0 : rpcbind (EulerOS-SA-2020-1761)

According to the version of the rpcbind package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR message...

EulerOS Virtualization 3.0.6.0 : spice-gtk (EulerOS-SA-2020-1727)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A...

EulerOS Virtualization 3.0.6.0 : gperftools (EulerOS-SA-2020-1780)

According to the version of the gperftools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE...

EulerOS Virtualization 3.0.6.0 : glibc (EulerOS-SA-2020-1712)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The GNU C Library aka glibc or libc6 before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2020-1762)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. Wh...

EulerOS Virtualization 3.0.6.0 : cairo (EulerOS-SA-2020-1735)

According to the version of the cairo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because o...

EulerOS Virtualization 3.0.6.0 : kvm (EulerOS-SA-2020-1792)

According to the versions of the kvm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor...

EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2020-1724)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...

EulerOS Virtualization 3.0.6.0 : httpd (EulerOS-SA-2020-1749)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP...

EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2020-1732)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before...

EulerOS Virtualization 3.0.6.0 : NetworkManager (EulerOS-SA-2020-1722)

According to the version of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An information exposure vulnerability has been found in NetworkManager when dnsmasq is used in DNS processing mode. An...

EulerOS Virtualization 3.0.6.0 : openssh (EulerOS-SA-2020-1719)

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users ...

EulerOS Virtualization 3.0.6.0 : lz4 (EulerOS-SA-2020-1771)

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

EulerOS Virtualization 3.0.6.0 : ghostscript (EulerOS-SA-2020-1738)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...

EulerOS Virtualization 3.0.6.0 : ppp (EulerOS-SA-2020-1775)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to 'access...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2020-1715)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash...