According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Linux kernel before 5.1-rc5 allows page->_refcount     reference count overflow, with resultant use-after-free     issues, if about 140 GiB of RAM exists. This is related     to fs/fuse/dev.c, fs/pipe.c, fs/splice.c,     include/linux/mm.h, include/linux/pipe_fs_i.h,     kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It     can occur with FUSE requests.(CVE-2019-11487)

  - A flaw was found in the Linux kernel's implementation     of ext4 extent management. The kernel doesn't correctly     initialize memory regions in the extent tree block     which may be exported to a local user to obtain     sensitive information by reading empty/uninitialized     data from the filesystem.(CVE-2019-11833)

  - A flaw was found in the Linux kernel's implementation     of the Bluetooth Human Interface Device Protocol     (HIDP). A local attacker with access permissions to the     Bluetooth device can issue an IOCTL which will trigger     the do_hidp_sock_ioctl function in     net/bluetooth/hidp/sock.c.c. This function can leak     potentially sensitive information from the kernel stack     memory via a HIDPCONNADD command because a name field     may not be correctly NULL terminated.(CVE-2019-11884)

  - An information leakage issue was found in the way Linux     kernel's KVM hypervisor handled page fault exceptions     while emulating instructions like VMXON, VMCLEAR,     VMPTRLD, and VMWRITE with memory address as an operand.
    It occurs if the operand is a mmio address, as the     returned exception object holds uninitialized stack     memory contents. A guest user/process could use this     flaw to leak host's stack memory contents to a     guest.(CVE-2019-7222)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow flaw was found in the way the Linux     kernel's networking subsystem processed TCP Selective     Acknowledgment (SACK) segments. While processing SACK     segments, the Linux kernel's socket buffer (SKB) data     structure becomes fragmented. Each fragment is about     TCP maximum segment size (MSS) bytes. To efficiently     process SACK blocks, the Linux kernel merges multiple     fragmented SKBs into one, potentially overflowing the     variable holding the number of segments. A remote     attacker could use this flaw to crash the Linux kernel     by sending a crafted sequence of SACK segments on a TCP     connection with small value of TCP MSS, resulting in a     denial of service (DoS). (CVE-2019-11477)

  - Kernel: tcp: excessive resource consumption while     processing SACK blocks allows remote denial of service     (CVE-2019-11478)

  - Kernel: tcp: excessive resource consumption for TCP     connections with low MSS allows remote denial of     service (CVE-2019-11479)

  - A flaw was found in the way the Linux kernel's memory     subsystem on certain 64-bit PowerPCs with the hash page     table MMU handled memory above 512TB. A local,     unprivileged user could use this flaw to escalate their     privileges on the system.(CVE-2019-12817)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ceph packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in the way the ListBucket function     max-keys has no defined limit in the RGW codebase. An     authenticated ceph RGW user can cause a denial of     service attack against OMAPs holding bucked     indices.(CVE-2018-16846)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A NULL pointer dereference (aka SEGV on unknown address     0x000000000000) was discovered in     work_stuff_copy_to_from in cplus-dem.c in GNU     libiberty, as distributed in GNU Binutils 2.30. This     can occur during execution of objdump.(CVE-2018-12697)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is a heap-based buffer overflow in
    _bfd_archive_64_bit_slurp_armap in     archive64.c.(CVE-2019-9075)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Subversion's mod_dav_svn Apache HTTPD module versions     1.11.0 and 1.10.0 to 1.10.3 will crash after     dereferencing an uninitialized pointer if the client     omits the root path in a recursive directory listing     operation.(CVE-2018-11803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the zip package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Info-ZIP Zip 3.0, when the -T and -TT command-line     options are used, allows attackers to cause a denial of     service (invalid free and application crash) or     possibly have unspecified other impact because of an     off-by-one error. NOTE: it is unclear whether there are     realistic scenarios in which an untrusted party     controls the -TT value, given that the entire purpose     of -TT is execution of arbitrary commands.

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - png_image_free in png.c in libpng 1.6.36 has a     use-after-free because png_image_free_function is     called under png_safe_execute.(CVE-2019-7317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A heap buffer overflow in the TFTP receiving code     allows for DoS or arbitrary code execution in libcurl     versions 7.19.4 through 7.64.1.(CVE-2019-5736)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows     remote attackers to cause a denial of service     (TIFFSetupStrips heap-based buffer overflow and     application crash) or possibly have unspecified other     impact via a crafted TIFF file.(CVE-2017-17095)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2     allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via a     crafted file.(CVE-2018-19607)

  - There is an infinite loop in the     Exiv2::Image::printIFDStructure function of image.cpp     in Exiv2 0.27-RC1. A crafted input will lead to a     remote denial of service attack.(CVE-2018-18915)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libexpat in Expat before 2.2.7, XML input including     XML names that contain a large number of colons could     make the XML parser consume a high amount of RAM and     CPU resources while processing (enough to be usable for     denial-of-service attacks).(CVE-2018-20843)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6     has an out-of-bounds write when there are many     selectors.(CVE-2019-12900)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Most digital cameras produce EXIF files, which are JPEG     files with extra tags that contain information about     the image. The EXIF library allows you to parse an EXIF     file and read the data from those tags.

  - Security fix(es):

  - An error when processing the EXIF_IFD_INTEROPERABILITY     and EXIF_IFD_EXIF tags within libexif version 0.6.21     can be exploited to exhaust available CPU     resources.(CVE-2018-20030)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A double-free was found when Samba's KDC is used as an     Active Directory Domain Controller. An authenticated     attacker could use this flaw to cause a denial of     service (application crash).(CVE-2018-16841)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The implementations of SAE in hostapd and     wpa_supplicant are vulnerable to side channel attacks     as a result of observable timing differences and cache     access patterns. An attacker may be able to gain leaked     information from a side channel attack that can be used     for full password recovery. Both hostapd with SAE     support and wpa_supplicant with SAE support prior to     and including version 2.7 are affected.(CVE-2019-9494)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A security regression of CVE-2019-9636 was discovered     in python, since commit     d537ab0ff9767ef024f26246899728f0116b1ec3, which still     allows an attacker to exploit CVE-2019-9636 by abusing     the user and password parts of a URL. When an     application parses user-supplied URLs to store cookies,     authentication credentials, or other kind of     information, it is possible for an attacker to provide     specially crafted URLs to make the application locate     host-related information (e.g. cookies, authentication     data) and send them to a different host than where it     should, unlike if the URLs had been correctly parsed.
    The result of an attack may vary based on the     application.(CVE-2019-10160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - OpenJDK: Infinite loop in RIFF format reader     (CVE-2018-3214)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lua packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Lua 5.3.5 has a use-after-free in lua_upvaluejoin in     lapi.c. For example, a crash outcome might be achieved     by an attacker who is able to trigger a     debug.upvaluejoin call in which the arguments have     certain relationships.(CVE-2019-6706)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in mj2/opj_mj2_extract.c in     OpenJPEG 2.3.0. The output prefix was not checked for     length, which could overflow a buffer, when providing a     prefix with 50 or more characters on the command     line.(CVE-2018-7648)

  - In OpenJPEG 2.3.0, a stack-based buffer overflow was     discovered in the pgxtovolume function in     jp3d/convert.c. The vulnerability causes an     out-of-bounds write, which may lead to remote denial of     service or possibly remote code     execution.(CVE-2017-17480)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libvirt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libvirt: arbitrary file read/exec via     virDomainSaveImageGetXMLDesc API (CVE-2019-10161)

  - libvirt: virDomainManagedSaveDefineXML API exposed to     readonly clients (CVE-2019-10166)

  - libvirt: arbitrary command execution via     virConnectGetDomainCapabilities API (CVE-2019-10167)

  - libvirt: arbitrary command execution via     virConnectBaselineHypervisorCPU and     virConnectCompareHypervisorCPU APIs (CVE-2019-10168)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - unzip: Buffer overflow in list.c resulting in a denial     of service.(CVE-2018-18384)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - When the default servlet in Apache Tomcat versions     9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to     7.0.90 returned a redirect to a directory (e.g.
    redirecting to '/foo/' when the user requested '/foo')     a specially crafted URL could be used to cause the     redirect to be generated to any URI of the attackers     choice.(CVE-2018-11784)

  - The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to     9.0.14 and 8.5.0 to 8.5.37 accepted streams with     excessive numbers of SETTINGS frames and also permitted     clients to keep streams open without reading/writing     request/response data. By keeping streams open for     requests that utilised the Servlet API's blocking I/O,     clients were able to cause server-side threads to block     eventually leading to thread exhaustion and a     DoS.(CVE-2019-0199)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A security regression of CVE-2019-9636 was discovered     in python, since commit     d537ab0ff9767ef024f26246899728f0116b1ec3, which still     allows an attacker to exploit CVE-2019-9636 by abusing     the user and password parts of a URL. When an     application parses user-supplied URLs to store cookies,     authentication credentials, or other kind of     information, it is possible for an attacker to provide     specially crafted URLs to make the application locate     host-related information (e.g. cookies, authentication     data) and send them to a different host than where it     should, unlike if the URLs had been correctly parsed.
    The result of an attack may vary based on the     application.(CVE-2019-10160)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow vulnerability in     extract_status_code() function in lib/html.c that     parses HTTP status code returned from web server allows     malicious web server or man-in-the-middle attacker     pretending to be a web server to cause either a denial     of service or potentially execute arbitrary code on     keepalived load balancer.(CVE-2018-19115)

  - keepalived 2.0.8 used mode 0666 when creating new     temporary files upon a call to PrintData or PrintStats,     potentially leaking sensitive     information.(CVE-2018-19045)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - NTP through 4.2.8p12 has a NULL Pointer     Dereference.(CVE-2019-8936)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before     1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without     configuring an authorization rule. A local attacker     could connect to this server socket and issue D-Bus     method calls. (Note that the server socket only accepts     a single connection, so the attacker would have to     discover the server and connect to the socket before     its owner does.)(CVE-2019-12795)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x     before 1.13.12, as used in DBusServer in Canonical     Upstart in Ubuntu 14.04 (and in some, less common, uses     of dbus-daemon), allows cookie spoofing because of     symlink mishandling in the reference implementation of     DBUS_COOKIE_SHA1 in the libdbus library. (This only     affects the DBUS_COOKIE_SHA1 authentication mechanism.)     A malicious client with write access to its own home     directory could manipulate a ~/.dbus-keyrings symlink     to cause a DBusServer with a different uid to read and     write in unintended locations. In the worst case, this     could result in the DBusServer reusing a cookie that is     known to the malicious client, and treating that cookie     as evidence that a subsequent client connection came     from an attacker-chosen uid, allowing authentication     bypass.(CVE-2019-12749)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that the `:source!` command was not     restricted by the sandbox mode. If modeline was     explicitly enabled, opening a specially crafted text     file in vim could result in arbitrary command     execution.(CVE-2019-12735)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Buffer overflow in GNU Wget 1.20.1 and earlier allows     remote attackers to cause a denial-of-service (DoS) or     may execute an arbitrary code via unspecified     vectors.(CVE-2019-5953)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In ImageMagick before 7.0.8-25 and GraphicsMagick     through 1.3.31, several memory leaks exist in     WritePDFImage in coders/pdf.c.(CVE-2019-7397)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was discovered freeradius does not correctly     configure logrotate, allowing a local attacker who     already has control of the radiusd user to escalate his     privileges to root, by tricking logrotate into writing     a radiusd-writable file to a directory normally     inaccessible by the radiusd user.(CVE-2019-10143)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - bubblewrap.c in Bubblewrap before 0.3.3 misuses     temporary directories in /tmp as a mount point. In some     particular configurations (related to XDG_RUNTIME_DIR),     a local attacker may abuse this flaw to prevent other     users from executing bubblewrap or potentially execute     code.(CVE-2019-12439)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The agroot() function in cgraph\obj.c in libcgraph.a in     Graphviz 2.39.20160612.1140 has a NULL pointer     dereference, as demonstrated by     graphml2gv.(CVE-2019-11023)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - OpenJDK: Slow conversion of BigDecimal to long     (CVE-2019-2602)

  - OpenJDK: Incomplete enforcement of the trustURLCodebase     restriction (CVE-2018-3149)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libffi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libffi requests an executable stack allowing attackers     to more easily trigger arbitrary code execution by     overwriting the stack. Please note that libffi is used     by a number of other libraries. It was previously     stated that this affects libffi version 3.2.1 but this     appears to be incorrect. libffi prior to version 3.1 on     32 bit x86 systems was vulnerable, and upstream is     believed to have fixed this issue in version     3.1.(CVE-2017-1000376)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The OpenSSL DSA signature algorithm has been shown to     be vulnerable to a timing side channel attack. An     attacker could use variations in the signing algorithm     to recover the private key. (CVE-2018-0734)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - OpenEMR version 5.0.0 contains a Cross Site Scripting     (XSS) vulnerability in open-flash-chart.swf and
    _posteddata.php that can result in . This vulnerability     appears to have been fixed in 5.0.0 Patch 2 or     higher.(CVE-2018-1000020)

  - OpenEMR version 5.0.0 contains a OS Command Injection     vulnerability in fax_dispatch.php that can result in OS     command injection by an authenticated attacker with any     role. This vulnerability appears to have been fixed in     5.0.0 Patch 2 or higher.(CVE-2018-1000019)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libarchive version commit     bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards     (release v3.0.2 onwards) contains a CWE-125:
    Out-of-bounds Read vulnerability in 7zip decompression,     archive_read_support_format_7zip.c, header_bytes() that     can result in a crash (denial of service). This attack     appears to be exploitable via the victim opening a     specially crafted 7zip file.(CVE-2019-1000019)

  - libarchive version commit     5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards     (version v2.8.0 onwards) contains a CWE-835: Loop with     Unreachable Exit Condition ('Infinite Loop')     vulnerability in ISO9660 parser,     archive_read_support_format_iso9660.c,     read_CE()/parse_rockridge() that can result in DoS by     infinite loop. This attack appears to be exploitable     via the victim opening a specially crafted ISO9660     file.(CVE-2019-1000020)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was found in sssd where, if a user was     configured with no home directory set, sssd would     return '/' (the root directory) instead of '' (the     empty string / no home directory). This could impact     services that restrict the user's filesystem access to     within their home directory through     chroot().(CVE-2019-3811)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in PolicyKit (aka polkit) 0.115 that     allows a user with a uid greater than INT_MAX to     successfully execute any systemctl     command.(CVE-2018-19788)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The ourWriteOut function in tool_writeout.c in curl     7.53.1 might allow physically proximate attackers to     obtain sensitive information from process memory in     opportunistic circumstances by reading a workstation     screen during use of a --write-out argument ending in a     '%' character, which leads to a heap-based buffer     over-read.(CVE-2017-7407)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.5.4, as used in GnuPG and other     products, does not properly perform ciphertext     normalization and ciphertext randomization, which makes     it easier for physically proximate attackers to conduct     key-extraction attacks by leveraging the ability to     collect voltage data from exposed metal, a different     vector than CVE-2013-4576.(CVE-2014-5270)

  - libgcrypt before version 1.7.8 is vulnerable to a cache     side-channel attack resulting into a complete break of     RSA-1024 while using the left-to-right method for     computing the sliding-window expansion. The same attack     is believed to work on RSA-2048 with moderately more     computation. This side-channel requires that attacker     can run arbitrary software on the hardware where the     private RSA key is used.(CVE-2017-7526)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An out of bounds read was discovered in     systemd-journald in the way it parses log messages that     terminate with a colon ':'. A local attacker can use     this flaw to disclose process memory     data.(CVE-2018-16866)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in Qt before 5.11.3. A     malformed SVG image causes a segmentation fault in     qsvghandler.cpp.(CVE-2018-19869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
127564	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1793)	High
127029	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-1792)	High
127028	EulerOS 2.0 SP8 : ceph (EulerOS-SA-2019-1791)	Medium
127027	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2019-1790)	Medium
127026	EulerOS 2.0 SP8 : subversion (EulerOS-SA-2019-1789)	Medium
127025	EulerOS 2.0 SP8 : zip (EulerOS-SA-2019-1788)	High
127024	EulerOS 2.0 SP8 : libpng (EulerOS-SA-2019-1787)	Low
127023	EulerOS 2.0 SP8 : curl (EulerOS-SA-2019-1786)	Medium
127022	EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2019-1785)	Medium
127021	EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-1784)	Medium
127020	EulerOS 2.0 SP8 : expat (EulerOS-SA-2019-1783)	High
127019	EulerOS 2.0 SP8 : bzip2 (EulerOS-SA-2019-1782)	High
127018	EulerOS 2.0 SP8 : libexif (EulerOS-SA-2019-1781)	High
127017	EulerOS 2.0 SP8 : samba (EulerOS-SA-2019-1780)	Medium
127016	EulerOS 2.0 SP8 : wpa_supplicant (EulerOS-SA-2019-1779)	Medium
127015	EulerOS 2.0 SP8 : python3 (EulerOS-SA-2019-1778)	Medium
127014	EulerOS 2.0 SP8 : java-1.8.0-openjdk (EulerOS-SA-2019-1777)	Medium
127013	EulerOS 2.0 SP8 : lua (EulerOS-SA-2019-1776)	Medium
127012	EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-1775)	High
127011	EulerOS 2.0 SP8 : libvirt (EulerOS-SA-2019-1774)	High
127010	EulerOS 2.0 SP8 : unzip (EulerOS-SA-2019-1773)	Medium
127009	EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2019-1772)	Medium
127008	EulerOS 2.0 SP8 : python2 (EulerOS-SA-2019-1771)	Medium
127007	EulerOS 2.0 SP8 : keepalived (EulerOS-SA-2019-1770)	High
127006	EulerOS 2.0 SP8 : ntp (EulerOS-SA-2019-1769)	Medium
127005	EulerOS 2.0 SP8 : gvfs (EulerOS-SA-2019-1768)	Medium
127004	EulerOS 2.0 SP8 : dbus (EulerOS-SA-2019-1767)	Low
127003	EulerOS 2.0 SP8 : vim (EulerOS-SA-2019-1766)	High
127002	EulerOS 2.0 SP8 : wget (EulerOS-SA-2019-1765)	High
127001	EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2019-1764)	Medium
127000	EulerOS 2.0 SP8 : freeradius (EulerOS-SA-2019-1763)	Medium
126999	EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)	Medium
126998	EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)	Medium
126997	EulerOS 2.0 SP8 : graphviz (EulerOS-SA-2019-1760)	Medium
126935	EulerOS 2.0 SP5 : java-1.7.0-openjdk (EulerOS-SA-2019-1759)	Medium
126934	EulerOS 2.0 SP5 : expat (EulerOS-SA-2019-1758)	High
126933	EulerOS 2.0 SP5 : bzip2 (EulerOS-SA-2019-1757)	High
126932	EulerOS 2.0 SP5 : libffi (EulerOS-SA-2019-1756)	Medium
126931	EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-1755)	Medium
126930	EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-1725)	Medium
126929	EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-1681)	Medium
126881	EulerOS 2.0 SP2 : sssd (EulerOS-SA-2019-1754)	Low
126880	EulerOS 2.0 SP2 : vim (EulerOS-SA-2019-1753)	High
126879	EulerOS 2.0 SP2 : polkit (EulerOS-SA-2019-1752)	High
126878	EulerOS 2.0 SP2 : curl (EulerOS-SA-2019-1751)	Low
126877	EulerOS 2.0 SP2 : libgcrypt (EulerOS-SA-2019-1750)	Medium
126876	EulerOS 2.0 SP2 : gvfs (EulerOS-SA-2019-1749)	Medium
126875	EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1748)	Low
126874	EulerOS 2.0 SP2 : freeradius (EulerOS-SA-2019-1747)	Medium
126873	EulerOS 2.0 SP2 : qt (EulerOS-SA-2019-1746)	Medium

Huawei Local Security Checks Family for Nessus