According to the version of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The payload length in a WebSocket frame was not     correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and     7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with     invalid payload lengths could lead to a denial of     service.(CVE-2020-13935)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: 2D). Supported versions     that are affected are Java SE: 8u251, 11.0.7 and 14.0.1     Java SE Embedded: 8u251. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized read access to     a subset of Java SE, Java SE Embedded accessible     data.(CVE-2020-14581)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the oddjob packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A race condition was found in the mkhomedir tool     shipped with the oddjob package in versions before     0.34.5 and 0.34.6 wherein, during the home creation,     mkhomedir copies the /etc/skel directory into the newly     created home and changes its ownership to the home's     user without properly checking the homedir path. This     flaw allows an attacker to leverage this issue by     creating a symlink point to a target folder, which then     has its ownership transferred to the new home     directory's unprivileged user.(CVE-2020-10737)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the trousers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in TrouSerS through 0.3.14. If     the tcsd daemon is started with root privileges instead     of by the tss user, it fails to drop the root gid     privilege when no longer needed.(CVE-2020-24330)

  - An issue was discovered in TrouSerS through 0.3.14. If     the tcsd daemon is started with root privileges, the     tss user still has read and write access to the     /etc/tcsd.conf file (which contains various settings     related to this daemon).(CVE-2020-24331)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the sane-backends packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference in sanei_epson_net_read in     SANE Backends before 1.0.30 allows a malicious device     connected to the same local network as the victim to     cause a denial of service, aka     GHSL-2020-075.(CVE-2020-12867)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the spamassassin package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A denial of service vulnerability was identified that     exists in Apache SpamAssassin before 3.4.2. The     vulnerability arises with certain unclosed tags in     emails that cause markup to be handled incorrectly     leading to scan timeouts. In Apache SpamAssassin, using     HTML::Parser, we setup an object and hook into the     begin and end tag event handlers In both cases, the     'open' event is immediately followed by a 'close' event
    - even if the tag *does not* close in the HTML being     parsed. Because of this, we are missing the 'text'     event to deal with the object normally. This can cause     carefully crafted emails that might take more scan time     than expected leading to a Denial of Service. The issue     is possibly a bug or design decision in HTML::Parser     that specifically impacts the way Apache SpamAssassin     uses the module with poorly formed html. The exploit     has been seen in the wild but not believed to have been     purposefully part of a Denial of Service attempt. We     are concerned that there may be attempts to abuse the     vulnerability in the future.(CVE-2017-15705)

  - Apache SpamAssassin 3.4.2 fixes a local user code     injection in the meta rule syntax.(CVE-2018-11781)

  - In Apache SpamAssassin before 3.4.3, a message can be     crafted in a way to use excessive resources. Upgrading     to SA 3.4.3 as soon as possible is the recommended fix     but details will not be shared     publicly.(CVE-2019-12420)

  - A command execution issue was found in Apache     SpamAssassin prior to 3.4.3. Carefully crafted     nefarious Configuration (.cf) files can be configured     to run system commands similar to CVE-2018-11805. This     issue is less stealthy and attempts to exploit the     issue will throw warnings. Thanks to Damian Lukowski at     credativ for reporting the issue ethically. With this     bug unpatched, exploits can be injected in a number of     scenarios though doing so remotely is difficult. In     addition to upgrading to SA 3.4.4, we again recommend     that users should only use update channels or 3rd party     .cf files from trusted places.(CVE-2020-1931)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2,     the user's password is kept in a session-child process     spawned from the LightDM daemon. This can expose the     credential in cleartext.(CVE-2018-20781)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in OpenEXR before 2.4.1. There     is an std::vector out-of-bounds read and write, as     demonstrated by ImfTileOffsets.cpp.(CVE-2020-11763)

  - An issue was discovered in OpenEXR before 2.4.1. There     is an out-of-bounds write in copyIntoFrameBuffer in     ImfMisc.cpp.(CVE-2020-11764)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - freedesktop.org libpoppler 0.60.1 fails to validate     boundaries in TextPool::addWord, leading to overflow in     subsequent calculations.(CVE-2017-1000456)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libldb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference, or possible use-after-free     flaw was found in Samba AD LDAP server in versions     before 4.10.17, before 4.11.11 and before 4.12.4.
    Although some versions of Samba shipped with Red Hat     Enterprise Linux do not support Samba in AD mode, the     affected code is shipped with the libldb package. This     flaw allows an authenticated user to possibly trigger a     use-after-free or NULL pointer dereference. The highest     threat from this vulnerability is to system     availability.(CVE-2020-10730)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In libexif, there is a possible out of bounds write due     to an integer overflow. This could lead to remote     escalation of privilege in the media content provider     with no additional execution privileges needed. User     interaction is needed for exploitation. Product:
    AndroidVersions: Android-10Android ID:
    A-112537774(CVE-2019-9278)

  - In exif_data_load_data_thumbnail of exif-data.c, there     is a possible denial of service due to an integer     overflow. This could lead to remote denial of service     with no additional execution privileges needed. User     interaction is not needed for exploitation.Product:
    AndroidVersions: Android-10Android ID:
    A-145075076(CVE-2020-0181)

  - In exif_data_save_data_entry of exif-data.c, there is a     possible out of bounds read due to a missing bounds     check. This could lead to local information disclosure     with no additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1 Android-9     Android-10Android ID: A-148705132(CVE-2020-0093)

  - In exif_data_load_data_content of exif-data.c, there is     a possible UBSAN abort due to an integer overflow. This     could lead to remote denial of service with no     additional execution privileges needed. User     interaction is needed for exploitation.Product:
    AndroidVersions: Android-10Android ID:
    A-146428941(CVE-2020-0198)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0     to 2.2.16, the Radiotap dissector could crash. This was     addressed in     epan/dissectors/packet-ieee80211-radiotap-iter.c by     validating iterator operations.(CVE-2018-16057)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In GNOME glib-networking through 2.64.2, the     implementation of GTlsClientConnection skips hostname     verification of the server's TLS certificate if the     application fails to specify the expected server     identity. This is in contrast to its intended     documented behavior, to fail the certificate     verification. Applications that fail to provide the     server identity, including Balsa before 2.5.11 and     2.6.x before 2.6.1, accept a TLS certificate if the     certificate is valid for any host.(CVE-2020-13645)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python-ipaddress package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Lib/ipaddress.py in Python through 3.8.3 improperly     computes hash values in the IPv4Interface and     IPv6Interface classes, which might allow a remote     attacker to cause a denial of service if an application     is affected by the performance of a dictionary     containing IPv4Interface or IPv6Interface objects, and     this attacker can cause many dictionary entries to be     created.(CVE-2020-14422)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A Division by Zero vulnerability in bj10v_print_page()     in contrib/japanese/gdev10v.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16299)

  - A buffer overflow vulnerability in     pj_common_print_page() in devices/gdevpjet.c of Artifex     Software GhostScript v9.50 allows a remote attacker to     cause a denial of service via a crafted PDF file.
    (CVE-2020-16288)

  - A buffer overflow vulnerability in cif_print_page() in     devices/gdevcif.c of Artifex Software GhostScript v9.50     allows a remote attacker to cause a denial of service     via a crafted PDF file. (CVE-2020-16289)

  - A buffer overflow vulnerability in     jetp3852_print_page() in devices/gdev3852.c of Artifex     Software GhostScript v9.50 allows a remote attacker to     cause a denial of service via a crafted PDF file.
    (CVE-2020-16290)

  - A buffer overflow vulnerability in mj_raster_cmd() in     contrib/japanese/gdevmjc.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16292)

  - A buffer overflow vulnerability in epsc_print_page() in     devices/gdevepsc.c of Artifex Software GhostScript     v9.50 allows a remote attacker to cause a denial of     service via a crafted PDF file. (CVE-2020-16294)

  - A null pointer dereference vulnerability in     clj_media_size() in devices/gdevclj.c of Artifex     Software GhostScript v9.50 allows a remote attacker to     cause a denial of service via a crafted PDF file.
    (CVE-2020-16295)

  - A buffer overflow vulnerability in GetNumWrongData() in     contrib/lips4/gdevlips.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16296)

  - A buffer overflow vulnerability in     FloydSteinbergDitheringC() in contrib/gdevbjca.c of     Artifex Software GhostScript v9.50 allows a remote     attacker to cause a denial of service via a crafted PDF     file. (CVE-2020-16297)

  - A buffer overflow vulnerability in mj_color_correct()     in contrib/japanese/gdevmjc.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16298)

  - A buffer overflow vulnerability in tiff12_print_page()     in devices/gdevtfnx.c of Artifex Software GhostScript     v9.50 allows a remote attacker to cause a denial of     service via a crafted PDF file. (CVE-2020-16300)

  - A buffer overflow vulnerability in okiibm_print_page1()     in devices/gdevokii.c of Artifex Software GhostScript     v9.50 allows a remote attacker to cause a denial of     service via a crafted PDF file. (CVE-2020-16301)

  - A buffer overflow vulnerability in GetNumSameData() in     contrib/lips4/gdevlips.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-17538)

  - A buffer overflow vulnerability in pcx_write_rle() in     contrib/japanese/gdev10v.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16305)

  - A buffer overflow vulnerability in p_print_image() in     devices/gdevcdj.c of Artifex Software GhostScript v9.50     allows a remote attacker to cause a denial of service     via a crafted PDF file. (CVE-2020-16308)

  - A buffer overflow vulnerability in     lxm5700m_print_page() in devices/gdevlxm.c of Artifex     Software GhostScript v9.50 allows a remote attacker to     cause a denial of service via a crafted eps file.
    (CVE-2020-16309)

  - A division by zero vulnerability in dot24_print_page()     in devices/gdevdm24.c of Artifex Software GhostScript     v9.50 allows a remote attacker to cause a denial of     service via a crafted PDF file. (CVE-2020-16310)

  - A buffer overflow vulnerability in lprn_is_black() in     contrib/lips4/gdevlprn.c of Artifex Software     GhostScript v9.50 allows a remote attacker to cause a     denial of service via a crafted PDF file.
    (CVE-2020-16287)

  - A buffer overflow vulnerability in contrib/gdevdj9.c of     Artifex Software GhostScript v9.50 allows a remote     attacker to cause a denial of service via a crafted PDF     file. (CVE-2020-16291)

  - A buffer overflow vulnerability in     jetp3852_print_page() in devices/gdev3852.c of Artifex     Software GhostScript v9.50 allows a remote attacker to     escalate privileges via a crafted PDF file.
    (CVE-2020-16302)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In mspack/cab.h in libmspack before 0.8alpha and     cabextract before 1.8, the CAB block input buffer is     one byte too small for the maximal Quantum block,     leading to an out-of-bounds write.(CVE-2018-18584)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Integer overflow in the decode_digit function in     puny_decode.c in Libidn2 before 2.0.4 allows remote     attackers to cause a denial of service or possibly have     unspecified other impact.(CVE-2017-14062)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the mailman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - /options/mailman in GNU Mailman before 2.1.31 allows     Arbitrary Content Injection.(CVE-2020-12108)

  - GNU Mailman 2.x before 2.1.30 uses the .obj extension     for scrubbed application/octet-stream MIME parts. This     behavior may contribute to XSS attacks against     list-archive visitors, because an HTTP reply from an     archive web server may lack a MIME type, and a web     browser may perform MIME sniffing, conclude that the     MIME type should have been text/html, and execute     JavaScript code.(CVE-2020-12137)

  - GNU Mailman before 2.1.33 allows arbitrary content     injection via the Cgi/private.py private archive login     page.(CVE-2020-15011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The parse_dict_node function in bplist.c in libplist     allows attackers to cause a denial of service     (out-of-bounds heap read and crash) via a crafted     file.(CVE-2017-5834)

  - libplist allows attackers to cause a denial of service     (large memory allocation and crash) via vectors     involving an offset size of zero.(CVE-2017-5835)

  - The plist_free_data function in plist.c in libplist     allows attackers to cause a denial of service (crash)     via vectors involving an integer node that is treated     as a PLIST_KEY and then triggers an invalid     free.(CVE-2017-5836)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the evolution-data-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - evolution-data-server (eds) through 3.36.3 has a     STARTTLS buffering issue that affects SMTP and POP3.
    When a server sends a 'begin TLS' response, eds reads     additional data and evaluates it in a TLS context, aka     'response injection.'(CVE-2020-14928)

  - In GNOME evolution-data-server before 3.35.91, a     malicious server can crash the mail client with a NULL     pointer dereference by sending an invalid (e.g.,     minimal) CAPABILITY line on a connection attempt. This     is related to imapx_free_capability and     imapx_connect_to_server.(CVE-2020-16117)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A TOCTOU mismatch in the NFS client code in the Linux     kernel before 5.8.3 could be used by local attackers to     corrupt memory or possibly have unspecified other     impact because a size check is in fs/nfs/nfs4proc.c     instead of fs/nfs/nfs4xdr.c, aka     CID-b4487b935452.(CVE-2020-25212)

  - In the Linux kernel through 5.8.7, local attackers able     to inject conntrack netlink configuration could     overflow a local buffer, causing crashes or triggering     use of incorrect protocol numbers in     ctnetlink_parse_tuple_filter in     net/netfilter/nf_conntrack_netlink.c, aka     CID-1cc5ef91d2ff.(CVE-2020-25211)

  - In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the     NFS server) can set incorrect permissions on new     filesystem objects when the filesystem lacks ACL     support, aka CID-22cf8419f131. This occurs because the     current umask is not considered.(CVE-2020-24394)

  - A flaw was found in the Linux kernel's implementation     of the invert video code on VGA consoles when a local     attacker attempts to resize the console, calling an     ioctl VT_RESIZE, which causes an out-of-bounds write to     occur. This flaw allows a local user with access to the     VGA console to crash the system, potentially escalating     their privileges on the system. The highest threat from     this vulnerability is to data confidentiality and     integrity as well as system     availability.(CVE-2020-14331)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python-rsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Python-RSA before 4.1 ignores leading '\0' bytes during     decryption of ciphertext. This could conceivably have a     security-relevant impact, e.g., by helping an attacker     to infer that an application uses Python-RSA, or if the     length of accepted ciphertext affects application     behavior (such as by causing excessive memory     allocation).(CVE-2020-13757)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An elevation of privilege vulnerability exists when an     attacker establishes a vulnerable Netlogon secure     channel connection to a domain controller, using the     Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon     Elevation of Privilege Vulnerability'.(CVE-2020-1472)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - net-snmp before 5.8.1.pre1 has a double free in     usm_free_usmStateReference in snmplib/snmpusm.c via an     SNMPv3 GetBulk request. NOTE: this affects net-snmp     packages shipped to end users by multiple Linux     distributions, but might not affect an upstream     release.(CVE-2019-20892)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In FreeRDP before version 2.1.2, there is an     out-of-bound read in glyph_cache_put. This affects all     FreeRDP clients with `+glyph-cache` option enabled This     is fixed in version 2.1.2.(CVE-2020-11098)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 ->     9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND     9 Supported Preview Edition, An attacker on the network     path for a TSIG-signed request, or operating the server     receiving the TSIG-signed request, could send a     truncated response to that request, triggering an     assertion failure, causing the server to exit.
    Alternately, an off-path attacker would have to     correctly guess when a TSIG-signed request was sent,     along with other characteristics of the packet and     message, and spoof a truncated response to trigger an     assertion failure, causing the server to     exit.(CVE-2020-8622)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Pillow before 7.1.0 has multiple out-of-bounds reads in     libImaging/FliDecode.c.(CVE-2020-10177)

  - In libImaging/PcxDecode.c in Pillow before 7.1.0, an     out-of-bounds read can occur when reading PCX files     where state->shuffle is instructed to read beyond     state->buffer.(CVE-2020-10378)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in all samba LDAP     server versions before 4.10.17, before 4.11.11, before     4.12.4 used in a AC DC configuration. A Samba LDAP user     could use this flaw to crash samba.(CVE-2020-10760)

  - A flaw was found in all Samba versions before 4.10.17,     before 4.11.11 and before 4.12.4 in the way it     processed NetBios over TCP/IP. This flaw allows a     remote attacker could to cause the Samba server to     consume excessive CPU use, resulting in a denial of     service. This highest threat from this vulnerability is     to system availability.(CVE-2020-10745)

  - A NULL pointer dereference, or possible use-after-free     flaw was found in Samba AD LDAP server in versions     before 4.10.17, before 4.11.11 and before 4.12.4.
    Although some versions of Samba shipped with Red Hat     Enterprise Linux do not support Samba in AD mode, the     affected code is shipped with the libldb package. This     flaw allows an authenticated user to possibly trigger a     use-after-free or NULL pointer dereference. The highest     threat from this vulnerability is to system     availability.(CVE-2020-10730)

  - A flaw was found in the AD DC NBT server in all Samba     versions before 4.10.17, before 4.11.11 and before     4.12.4. A samba user could send an empty UDP packet to     cause the samba server to crash.(CVE-2020-14303)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based     buffer over-read in BlobToStringInfo in     MagickCore/string.c during TIFF image     decoding.(CVE-2020-13902)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way xserver memory was not     properly initialized. This could leak parts of server     memory to the X client. In cases where Xorg server runs     with elevated privileges, this could result in possible     ASLR bypass. Xorg-server before version 1.20.9 is     vulnerable.(CVE-2020-14347)

  - A flaw was found in xorg-x11-server before 1.20.9. An     integer underflow in the X input extension protocol     decoding in the X server may lead to arbitrary access     of memory contents. The highest threat from this     vulnerability is to data confidentiality and integrity     as well as system availability.(CVE-2020-14346)

  - A flaw was found in X.Org Server before xorg-x11-server     1.20.9. An Integer underflow leading to heap-buffer     overflow may lead to a privilege escalation     vulnerability. The highest threat from this     vulnerability is to data confidentiality and integrity     as well as system availability.(CVE-2020-14361)

  - A flaw was found in X.Org Server before xorg-x11-server     1.20.9. An Integer underflow leading to heap-buffer     overflow may lead to a privilege escalation     vulnerability. The highest threat from this     vulnerability is to data confidentiality and integrity     as well as system availability.(CVE-2020-14362)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - heap based buffer overflow in libcups's ppdFindOption()     in ppd-mark.c(CVE-2020-3898)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in dbus >= 1.3.0 before     1.12.18. The DBusServer in libdbus, as used in     dbus-daemon, leaks file descriptors when a message     exceeds the per-message file descriptor limit. A local     attacker with access to the D-Bus system bus or another     system service's private AF_UNIX socket could use this     to make the system service reach its file descriptor     limit, denying service to subsequent D-Bus     clients.(CVE-2020-12049)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Use-after-free in the XML-LibXML module through 2.0129     for Perl allows remote attackers to execute arbitrary     code by controlling the arguments to a replaceChild     call.(CVE-2017-10672)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the PyYAML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability in the implementation of the Short     Message Service (SMS) handling functionality of Cisco     IOS Software and Cisco IOS XE Software could allow an     unauthenticated, remote attacker to trigger a denial of     service (DoS) condition on an affected device. The     vulnerability is due to improper processing of SMS     protocol data units (PDUs) that are encoded with a     special character set. An attacker could exploit this     vulnerability by sending a malicious SMS message to an     affected device. A successful exploit could allow the     attacker to cause the wireless WAN (WWAN) cellular     interface module on an affected device to crash,     resulting in a DoS condition that would require manual     intervention to restore normal operating     conditions.(CVE-2019-1747)

  - PyYAML 5.1 through 5.1.2 has insufficient restrictions     on the load and load_all functions because of a class     deserialization issue, e.g., Popen is a class in the     subprocess module. NOTE: this issue exists because of     an incomplete fix for CVE-2017-18342.(CVE-2019-20477)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - fr-archive-libarchive.c in GNOME file-roller through     3.36.1 allows Directory Traversal during extraction     because it lacks a check of whether a file's parent is     a symlink to a directory outside of the intended     extraction location.(CVE-2020-11736)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lcms2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Little CMS (aka Little Color Management System) 2.9 has     an integer overflow in the AllocateDataSet function in     cmscgats.c, leading to a heap-based buffer overflow in     the SetData function via a crafted file in the second     argument to cmsIT8LoadFromFile.(CVE-2018-16435)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 and earlier have a global     buffer over-read vulnerability in     xmlEncodeEntitiesInternal at libxml2/entities.c. The     issue has been fixed in commit 8e7c20a1     (20910-GITv2.9.10-103-g8e7c20a1).(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Open Connectivity Foundation UPnP specification     before 2020-04-17 does not forbid the acceptance of a     subscription request with a delivery URL on a different     network segment than the fully qualified     event-subscription URL, aka the CallStranger     issue.(CVE-2020-12695)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - NULL pointer dereference vulnerability in the     rebuild_vlists function in lib/dotgen/conc.c in the     dotgen library in Graphviz 2.40.1 allows remote     attackers to cause a denial of service (application     crash) via a crafted file.(CVE-2018-10196)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Lib/tarfile.py in Python through 3.8.3, an attacker     is able to craft a TAR archive leading to an infinite     loop when opened by tarfile.open, because _proc_pax     lacks header validation.(CVE-2019-20907)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An information disclosure vulnerability in     silk/NLSF_stabilize.c in libopus in Mediaserver could     enable a local malicious application to access data     outside of its permission levels. This issue is rated     as Moderate because it could be used to access     sensitive data without permission. Product: Android.
    Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android     ID: A-31607432.(CVE-2017-0381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the python-rtslib package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Open-iSCSI rtslib-fb through 2.1.72 has weak     permissions for /etc/target/saveconfig.json because     shutil.copyfile (instead of shutil.copy) is used, and     thus permissions are not preserved.(CVE-2020-14019)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was discovered the fix for CVE-2018-19758     (libsndfile) was not complete and still allows a read     beyond the limits of a buffer in wav_write_header()     function in wav.c. A local attacker may use this flaw     to make the application crash.(CVE-2019-3832)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - remember_Ktype in cplus-dem.c in GNU libiberty, as     distributed in GNU Binutils 2.30, allows attackers to     trigger excessive memory consumption (aka OOM). This     can occur during execution of cxxfilt.(CVE-2018-12934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cvs package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - CVS 1.12.x, when configured to use SSH for remote     repositories, might allow remote attackers to execute     arbitrary code via a repository URL with a crafted     hostname, as demonstrated by     '-oProxyCommand=idlocalhost:/bar.'(CVE-2017-12836)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the mailman package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in GNU Mailman before 2.1.28. A     crafted URL can cause arbitrary text to be displayed on     a web page from a trusted site.(CVE-2018-13796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in Qt through 5.12.9, and     5.13.x through 5.15.x before 5.15.1. read_xbm_body in     gui/image/qxbmhandler.cpp has a buffer     over-read.(CVE-2020-17507)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - lldptool version 1.0.1 and older can print a raw,     unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to     inject shell control characters into the buffer and     impact the behavior of the terminal.(CVE-2018-10932)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Squid before 4.13 and 5.x before 5.0.4 allows a trusted     peer to perform Denial of Service by consuming all     available CPU cycles during handling of a crafted Cache     Digest response message. This only occurs when     cache_peer is used with the cache digests feature. The     problem exists because peerDigestHandleReply()     livelocking in peer_digest.cc mishandles     EOF.(CVE-2020-24606)

  - An issue was discovered in Squid before 4.13 and 5.x     before 5.0.4. Due to incorrect data validation, HTTP     Request Splitting attacks may succeed against HTTP and     HTTPS traffic. This leads to cache poisoning. This     allows any client, including browser scripts, to bypass     local security and poison the browser cache and any     downstream caches with content from an arbitrary     source. Squid uses a string search instead of parsing     the Transfer-Encoding header to find chunked encoding.
    This allows an attacker to hide a second request inside     Transfer-Encoding: it is interpreted by Squid as     chunked and split out into a second request delivered     upstream. Squid will then deliver two distinct     responses to the client, corrupting any downstream     caches.(CVE-2020-15811)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds     write leading to unauthenticated remote     denial-of-service in OpenLDAP via a malformed LDAP     packet. The OpenLDAP crash is ultimately caused by an     off-by-one error in _sasl_add_string in common.c in     cyrus-sasl.(CVE-2019-19906)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
142134	EulerOS 2.0 SP5 : tomcat (EulerOS-SA-2020-2274)	Medium
142133	EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2020-2285)	Medium
142132	EulerOS 2.0 SP5 : oddjob (EulerOS-SA-2020-2260)	Low
142131	EulerOS 2.0 SP5 : trousers (EulerOS-SA-2020-2301)	High
142130	EulerOS 2.0 SP5 : sane-backends (EulerOS-SA-2020-2271)	Low
142129	EulerOS 2.0 SP5 : spamassassin (EulerOS-SA-2020-2272)	High
142128	EulerOS 2.0 SP5 : gnome-keyring (EulerOS-SA-2020-2283)	Low
142127	EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2020-2261)	Medium
142126	EulerOS 2.0 SP5 : poppler (EulerOS-SA-2020-2295)	Medium
142125	EulerOS 2.0 SP5 : libldb (EulerOS-SA-2020-2253)	Medium
142124	EulerOS 2.0 SP5 : libexif (EulerOS-SA-2020-2251)	Medium
142123	EulerOS 2.0 SP5 : wireshark (EulerOS-SA-2020-2275)	Medium
142122	EulerOS 2.0 SP5 : glib-networking (EulerOS-SA-2020-2246)	Medium
142121	EulerOS 2.0 SP5 : python-ipaddress (EulerOS-SA-2020-2265)	Medium
142120	EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2020-2282)	Medium
142119	EulerOS 2.0 SP5 : libmspack (EulerOS-SA-2020-2287)	Medium
142118	EulerOS 2.0 SP5 : libidn (EulerOS-SA-2020-2252)	High
142117	EulerOS 2.0 SP5 : mailman (EulerOS-SA-2020-2256)	Medium
142116	EulerOS 2.0 SP5 : libplist (EulerOS-SA-2020-2288)	Medium
142113	EulerOS 2.0 SP5 : evolution-data-server (EulerOS-SA-2020-2243)	Medium
142112	EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-2303)	High
142111	EulerOS 2.0 SP5 : python-rsa (EulerOS-SA-2020-2267)	Medium
142110	EulerOS 2.0 SP5 : samba (EulerOS-SA-2020-2299)	High
142109	EulerOS 2.0 SP5 : net-snmp (EulerOS-SA-2020-2259)	Medium
142106	EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2020-2245)	Medium
142103	EulerOS 2.0 SP5 : bind (EulerOS-SA-2020-2278)	Medium
142102	EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2020-2266)	Medium
142101	EulerOS 2.0 SP5 : samba (EulerOS-SA-2020-2270)	High
142100	EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2020-2248)	Medium
142099	EulerOS 2.0 SP5 : xorg-x11-server (EulerOS-SA-2020-2302)	Medium
142098	EulerOS 2.0 SP5 : cups (EulerOS-SA-2020-2241)	Medium
142096	EulerOS 2.0 SP5 : dbus (EulerOS-SA-2020-2242)	Medium
142094	EulerOS 2.0 SP5 : perl-XML-LibXML (EulerOS-SA-2020-2294)	High
142093	EulerOS 2.0 SP5 : PyYAML (EulerOS-SA-2020-2269)	High
142092	EulerOS 2.0 SP5 : file-roller (EulerOS-SA-2020-2244)	Low
142091	EulerOS 2.0 SP5 : lcms2 (EulerOS-SA-2020-2286)	Medium
142090	EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2020-2289)	Medium
142089	EulerOS 2.0 SP5 : wpa_supplicant (EulerOS-SA-2020-2276)	High
142088	EulerOS 2.0 SP5 : graphviz (EulerOS-SA-2020-2284)	Medium
142087	EulerOS 2.0 SP5 : python (EulerOS-SA-2020-2264)	Medium
142086	EulerOS 2.0 SP5 : opus (EulerOS-SA-2020-2293)	High
142085	EulerOS 2.0 SP5 : python-rtslib (EulerOS-SA-2020-2268)	Medium
142084	EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-2254)	Low
142083	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-2239)	Medium
142082	EulerOS 2.0 SP5 : cvs (EulerOS-SA-2020-2280)	Medium
142081	EulerOS 2.0 SP5 : mailman (EulerOS-SA-2020-2291)	Medium
142080	EulerOS 2.0 SP5 : qt (EulerOS-SA-2020-2298)	Medium
142079	EulerOS 2.0 SP5 : lldpad (EulerOS-SA-2020-2290)	Low
142077	EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-2300)	High
142076	EulerOS 2.0 SP5 : cyrus-sasl (EulerOS-SA-2020-2281)	Medium

Huawei Local Security Checks Family for Nessus