According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The string component in the GNU C Library (aka glibc or     libc6) through 2.28, when running on the x32     architecture, incorrectly attempts to use a 64-bit     register for size_t in assembly codes, which can lead     to a segmentation fault or possibly unspecified other     impact, as demonstrated by a crash in
    __memmove_avx_unaligned_erms in     sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S     during a memcpy.(CVE-2019-6488)

  - On the x86-64 architecture, the GNU C Library (aka     glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during     program execution after a security transition, allowing     local attackers to restrict the possible mapping     addresses for loaded libraries and thus bypass ASLR for     a setuid program.(CVE-2019-19126)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

EulerOS 2.0 SP8 : glibc (EulerOS-SA-2020-1007)

high Nessus Plugin ID 132600

Version 1.6

Version 1.5

Version 1.6 Apr 2, 2024, 2:43 PM CVSSv2 score source (set to "CVE-2019-6488") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202404021443
Version 1.5 Apr 2, 2024, 12:34 PM CVSSv2 score source (set to "CVE-2019-6488") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202404021234