According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A cached side channel attack during handshakes using     RSA encryption could allow for the decryption of     encrypted content. This is a variant of the Adaptive     Chosen Ciphertext attack (AKA Bleichenbacher attack)     and affects all NSS versions prior to NSS     3.41.(CVE-2018-12404)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the netpbm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The netpbm package contains a library of functions     which support programs for handling various graphics     file formats, including .pbm (portable bitmaps), .pgm     (portable graymaps), .pnm (portable anymaps),.ppm     (portable pixmaps) and others.Security Fix(es):The     pm_mallocarray2 function in lib/util/mallocvar.c in     Netpbm through 10.81.03 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     via a crafted image file, as demonstrated by     pbmmask.(CVE-2018-8975)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libXfont package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libXfont before 1.5.4 and libXfont2 before 2.0.3, a     local attacker can open (but not read) files on the     system as root, triggering tape rewinds, watchdogs, or     similar mechanisms that can be triggered by opening     files.(CVE-2017-16611)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The _asn1_check_identifier function in GNU Libtasn1     through 4.12 causes a NULL pointer dereference and     crash when reading crafted input that triggers     assignment of a NULL value within an asn1_node     structure. It may lead to a remote denial of service     attack.(CVE-2017-10790)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libsamplerate package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libsamplerate before 0.1.9, a buffer over-read     occurs in the calc_output_single function in src_sinc.c     via a crafted audio file.(CVE-2017-7697)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libreoffice packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - LibreOffice has a feature where documents can specify     that pre-installed macros can be executed on various     script events such as mouse-over, document-open etc.
    Access is intended to be restricted to scripts under     the share/Scripts/python, user/Scripts/python     sub-directories of the LibreOffice install. Protection     was added, to address CVE-2019-9852, to avoid a     directory traversal attack where scripts in arbitrary     locations on the file system could be executed by     employing a URL encoding attack to defeat the path     verification step. However this protection could be     bypassed by taking advantage of a flaw in how     LibreOffice assembled the final script URL location     directly from components of the passed in path as     opposed to solely from the sanitized output of the path     verification step. This issue affects: Document     Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3     versions prior to 6.3.1.(CVE-2019-9854)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libnl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An elevation of privilege vulnerability in libnl could     enable a local malicious application to execute     arbitrary code within the context of the Wi-Fi service.
    This issue is rated as Moderate because it first     requires compromising a privileged process and is     mitigated by current platform configurations. Product:
    Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,     7.1.1. Android ID: A-32342065. NOTE: this issue also     exists in the upstream libnl before 3.3.0     library.(CVE-2017-0553)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libgxps package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - There is a NULL pointer dereference in the     caseless_hash function in gxps-archive.c in libgxps     0.2.5. A crafted input will lead to a remote denial of     service attack.(CVE-2017-11590)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libgsf package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An error within the 'tar_directory_for_file()' function     (gsf-infile-tar.c) in GNOME Structured File Library     before 1.14.41 can be exploited to trigger a Null     pointer dereference and subsequently cause a crash via     a crafted TAR file.(CVE-2016-9888)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It has been discovered that lftp up to and including     version 4.8.3 does not properly sanitize remote file     names, leading to a loss of integrity on the local     system when reverse mirroring is used. A remote     attacker may trick a user to use reverse mirroring on     an attacker controlled FTP server, resulting in the     removal of all files in the current working directory     of the victim's system.(CVE-2018-10916)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An out of bound read, with a maximum of 5 bytes, was     found in the way the is_utf8_well_formed() function     parsed UTF-8 characters. If less was to be recompiled     with an address sanitizer, a specially crafted input     could crash less.(CVE-2014-9488)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lcms2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Type_MLU_Read function in cmstypes.c in Little CMS     (aka lcms2) allows remote attackers to obtain sensitive     information or cause a denial of service via an image     with a crafted ICC profile, which triggers an     out-of-bounds heap read.(CVE-2016-10165)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Double free vulnerability in MIT Kerberos 5 (aka krb5)     allows attackers to have unspecified impact via vectors     involving automatic deletion of security contexts on     error.(CVE-2017-11462)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - When using an incomplete variable argument, Irssi     before 1.0.6 may access data beyond the end of the     string.(CVE-2018-5207)

  - When the channel topic is set without specifying a     sender, Irssi before 1.0.6 may dereference a NULL     pointer.(CVE-2018-5206)

  - When using incomplete escape codes, Irssi before 1.0.6     may access data beyond the end of the     string.(CVE-2018-5205)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ImageMagick is an image display and manipulation tool     for the X Window System. ImageMagick can read and write     JPEG, TIFF, PNM, GIF,and Photo CD image formats. It can     resize, rotate, sharpen, color reduce, or add special     effects to an image, and when finished you can either     save the completed work in the original format or a     different one. ImageMagick also includes command line     programs for creating animated or transparent .gifs,     creating composite images, creating thumbnail images,     and more.ImageMagick is one of your choices if you need     a program to manipulate and display images. If you want     to develop your own applications which use ImageMagick     code or APIs, you need to install ImageMagick-devel as     well.Security Fix(es):In ImageMagick before 7.0.8-8, a     NULL pointer dereference exists in the     GetMagickProperty function in     MagickCore/property.c.(CVE-2018-16329)ImageMagick     before 6.9.9-24 and 7.x before 7.0.7-12 has a     use-after-free in Magick::Image::read in     Magick++/lib/Image.cpp.(CVE-2017-17499)In ImageMagick     before 6.9.8-5 and 7.x before 7.0.5-6, there is a     memory leak in the ReadMATImage function in     coders/mat.c.(CVE-2017-13146)In ImageMagick before     6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage     function in coders/mat.c uses uninitialized data, which     might allow remote attackers to obtain sensitive     information from process memory.(CVE-2017-13143)In     ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the     ReadOneMNGImage function in coders/png.c has an     out-of-bounds read with the MNG CLIP     chunk.(CVE-2017-13139)coders/psd.c in ImageMagick     allows remote attackers to have unspecified impact via     a crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5510)coders/psd.c in ImageMagick allows     remote attackers to have unspecified impact via a     crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5509)Memory leak in coders/mpc.c in     ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4     allows remote attackers to cause a denial of service     (memory consumption) via vectors involving a pixel     cache.(CVE-2017-5507)Memory leak in the IsOptionMember     function in MagickCore/option.c in ImageMagick before     6.9.2-2, as used in ODR-PadEnc and other products,     allows attackers to trigger memory     consumption.(CVE-2016-10252)Off-by-one error in     coders/wpg.c in ImageMagick allows remote attackers to     have unspecified impact via vectors related to a string     copy.(CVE-2016-10145)Memory leak in     AcquireVirtualMemory in ImageMagick before 7 allows     remote attackers to cause a denial of service (memory     consumption) via unspecified vectors.(CVE-2016-7539)In     coders/bmp.c in ImageMagick before 7.0.8-16, an input     file can result in an infinite loop and hang, with high     CPU and memory consumption. Remote attackers could     leverage this vulnerability to cause a denial of     service via a crafted file.(CVE-2018-20467)In     ImageMagick before 7.0.8-8, a NULL pointer dereference     exists in the CheckEventLogging function in     MagickCore/log.c.(CVE-2018-16328)ReadXBMImage in     coders/xbm.c in ImageMagick before 7.0.8-9 leaves data     uninitialized when processing an XBM file that has a     negative pixel value. If the affected code is used as a     library loaded into a process that includes sensitive     information, that information sometimes can be leaked     via the image data.(CVE-2018-16323)WriteEPTImage in     coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote     attackers to cause a denial of service     (MagickCore/memory.c double free and application crash)     or possibly have unspecified other impact via a crafted     file.(CVE-2018-8804)In ImageMagick 7.0.8-3 Q16,     ReadDIBImage and WriteDIBImage in coders/dib.c allow     attackers to cause an out of bounds write via a crafted     file.(CVE-2018-12600)ImageMagick version 7.0.7-2     contains a memory leak in ReadYUVImage in     coders/yuv.c.(CVE-2017-15033)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Regular Expressions package in International     Components for Unicode (ICU) 52 before SVN revision     292944, as used in Google Chrome before 40.0.2214.91,     allows remote attackers to cause a denial of service     (memory corruption) or possibly have unspecified other     impact via vectors related to a zero-length     quantifier.(CVE-2014-7926)

  - The Regular Expressions package in International     Components for Unicode (ICU) 52 before SVN revision     292944, as used in Google Chrome before 40.0.2214.91,     allows remote attackers to cause a denial of service     (memory corruption) or possibly have unspecified other     impact via vectors related to a look-behind     expression.(CVE-2014-7923)

  - The collator implementation in i18n/ucol.cpp in     International Components for Unicode (ICU) 52 through     SVN revision 293126, as used in Google Chrome before     40.0.2214.91, does not initialize memory for a data     structure, which allows remote attackers to cause a     denial of service or possibly have unspecified other     impact via a crafted character sequence.(CVE-2014-7940)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the http-parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - This is a parser for HTTP messages written in C. It     parses both requests and responses. The parser is     designed to be used in performance HTTP applications.It     does not make any syscalls nor allocations, it does not     buffer data, it can be interrupted at anytime.
    Depending on your architecture, it only requires about     40 bytes of data per message stream (in a web server     that is per connection).Security Fix(es):The HTTP     parser in all current versions of Node.js ignores     spaces in the `Content-Length` header, allowing input     such as `Content-Length: 1 2` to be interpreted as     having a value of `12`. The HTTP specification does not     allow for spaces in the `Content-Length` value and the     Node.js HTTP parser has been brought into line on this     particular difference. The security risk of this flaw     to Node.js users is considered to be VERY LOW as it is     difficult, and may be impossible, to craft an attack     that makes use of this flaw in a way that could not     already be achieved by supplying an incorrect value for     `Content-Length`. Vulnerabilities may exist in     user-code that make incorrect assumptions about the     potential accuracy of this value compared to the actual     length of the data supplied. Node.js users crafting     lower-level HTTP utilities are advised to re-check the     length of any input supplied after parsing is     complete.(CVE-2018-7159)Node.js: All versions prior to     Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of     Service with large HTTP headers: By using a combination     of many requests with maximum sized headers (almost 80     KB per connection), and carefully timed completion of     the headers, it is possible to cause the HTTP server to     abort from heap allocation failure. Attack potential is     mitigated by the use of a load balancer or other proxy     layer.(CVE-2018-12121)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in Apache HTTP Server 2.4.0     to 2.4.38. When the path component of a request URL     contains multiple consecutive slashes ('/'), directives     such as LocationMatch and RewriteRule must account for     duplicates in regular expressions while other aspects     of the servers processing will implicitly collapse     them.(CVE-2019-0220)

  - A specially crafted request could have crashed the     Apache HTTP Server prior to version 2.4.30, due to an     out of bound access after a size limit is reached by     reading the HTTP header. This vulnerability is     considered very hard if not impossible to trigger in     non-debug mode (both log and build level), so it is     classified as low risk for common server     usage.(CVE-2018-1301)

  - In Apache httpd 2.4.0 to 2.4.29, when mod_session is     configured to forward its session data to CGI     applications (SessionEnv on, not the default), a remote     user may influence their content by using a 'Session'     header. This comes from the 'HTTP_SESSION' variable     name used by mod_session to forward its data to CGIs,     since the prefix 'HTTP_' is also used by the Apache     HTTP Server to pass HTTP header fields, per CGI     specifications.(CVE-2018-1283)

  - mod_lua.c in the mod_lua module in the Apache HTTP     Server 2.3.x and 2.4.x through 2.4.10 does not support     an httpd configuration in which the same Lua     authorization provider is used with different arguments     within different contexts, which allows remote     attackers to bypass intended access restrictions in     opportunistic circumstances by leveraging multiple     Require directives, as demonstrated by a configuration     that specifies authorization for one group to access a     certain directory, and authorization for a second group     to access a second directory.(CVE-2014-8109)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An incorrect permission check in the admin backend in     gvfs before version 1.39.4 was found that allows     reading and modify arbitrary files by privileged users     without asking for password when no authentication     agent is running. This vulnerability can be exploited     by malicious programs running under privileges of users     belonging to the wheel group to further escalate its     privileges by modifying system files without user's     knowledge. Successful exploitation requires uncommon     system configuration.(CVE-2019-3827)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In the GNU C Library (aka glibc or libc6) through 2.28,     the getaddrinfo function would successfully parse a     string that contained an IPv4 address followed by     whitespace and arbitrary characters, which could lead     applications to incorrectly assume that it had parsed a     valid string, without the possibility of embedded HTTP     headers or other potentially dangerous     substrings.(CVE-2016-10739)

  - Use-after-free vulnerability in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) before 2.26 allows remote attackers to     have unspecified impact via vectors related to error     path.(CVE-2017-12133)

  - Stack-based buffer overflow in the glob implementation     in GNU C Library (aka glibc) before 2.24, when     GLOB_ALTDIRFUNC is used, allows context-dependent     attackers to cause a denial of service (crash) via a     long name.(CVE-2016-1234)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0     through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress.
    Instead, default permissions are used.(CVE-2019-12450)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GIT version 2.15.1 and earlier contains a Input     Validation Error vulnerability in Client that can     result in problems including messing up terminal     configuration to RCE. This attack appear to be     exploitable via The user must interact with a malicious     git server, (or have their traffic modified in a MITM     attack).(CVE-2018-1000021)

  - Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before     2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2     uses unsafe Perl scripts to support subcommands such as     cvsserver, which allows attackers to execute arbitrary     OS commands via shell metacharacters in a module name.
    The vulnerable code is reachable via git-shell even     without CVS support.(CVE-2017-14867)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in util/gif2rgb.c in gif2rgb     in giflib 5.1.2 allows remote attackers to cause a     denial of service (application crash) via the     background color index in a GIF file.(CVE-2016-3977)

  - Heap-based buffer overflow in giffix.c in giffix in     giflib 5.1.1 allows attackers to cause a denial of     service (program crash) via crafted image and logical     screen width fields in a GIF file.(CVE-2015-7555)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - psi/zfile.c in Artifex Ghostscript before 9.21rc1     permits the status command even if -dSAFER is used,     which might allow remote attackers to determine the     existence and size of arbitrary files, a similar issue     to CVE-2016-7977.(CVE-2018-11645)

  - The PS Interpreter in Ghostscript 9.18 and 9.20 allows     remote attackers to execute arbitrary code via crafted     userparams.(CVE-2016-7976)

  - A flaw was found in, ghostscript versions prior to     9.28, in the .pdf_hook_DSC_Creator procedure where it     did not properly secure its privileged calls, enabling     scripts to bypass `-dSAFER` restrictions. A specially     crafted PostScript file could disable security     protection and then have access to the file system, or     execute arbitrary commands.(CVE-2019-14811)

  - A flaw was found in the .setuserparams2 procedure where     it did not properly secure its privileged calls,     enabling scripts to bypass `-dSAFER` restrictions. A     specially crafted PostScript file could disable     security protection and then have access to the file     system, or execute arbitrary commands.(CVE-2019-14812)

  - A flaw was found in the setsystemparams procedure where     it did not properly secure its privileged calls,     enabling scripts to bypass `-dSAFER` restrictions. A     specially crafted PostScript file could disable     security protection and then have access to the file     system, or execute arbitrary commands.(CVE-2019-14813)

  - A flaw was found in the .pdfexectoken and other     procedures where it did not properly secure its     privileged calls, enabling scripts to bypass `-dSAFER`     restrictions. A specially crafted PostScript file could     disable security protection and then have access to the     file system, or execute arbitrary     commands.(CVE-2019-14817)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gegl package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in GEGL through 0.3.32. The     gegl_buffer_iterate_read_simple function in     buffer/gegl-buffer-access.c allows remote attackers to     cause a denial of service (write access violation) or     possibly have unspecified other impact via a malformed     PPM file, related to improper restrictions on memory     allocation in the ppm_load_read_header function in     operations/external/ppm-load.c.(CVE-2018-10114)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in gd_io.c in the GD Graphics Library     (aka libgd) before 2.2.4 allows remote attackers to     have unspecified impact via vectors involving the     number of horizontal and vertical chunks in an     image.(CVE-2016-10168)

  - The gdImageCreateFromGd2Ctx function in gd_gd2.c in the     GD Graphics Library (aka libgd) before 2.2.4 allows     remote attackers to cause a denial of service     (application crash) via a crafted image     file.(CVE-2016-10167)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The t42_parse_encoding function in type42/t42parse.c in     FreeType before 2.5.4 does not properly update the     current position for immediates-only mode, which allows     remote attackers to cause a denial of service (infinite     loop) via a Type42 font.(CVE-2014-9747)

  - The parse_encoding function in type1/t1load.c in     FreeType before 2.5.3 allows remote attackers to cause     a denial of service (infinite loop) via a 'broken     number-with-base' in a Postscript stream, as     demonstrated by 8#garbage.(CVE-2014-9745)

  - In FreeType before 2.6.1, a buffer over-read occurs in     type1/t1parse.c on function T1_Get_Private_Dict where     there is no check that the new values of cur and limit     are sensible before going to Again.(CVE-2015-9290)

  - FreeType before 2.6.1 has a heap-based buffer over-read     in T1_Get_Private_Dict in     type1/t1parse.c.(CVE-2015-9381)

  - FreeType before 2.6.1 has a buffer over-read in     skip_comment in psaux/psobjs.c because     ps_parser_skip_PS_token is mishandled in an     FT_New_Memory_Face operation.(CVE-2015-9382)

  - FreeType before 2.6.2 has a heap-based buffer over-read     in tt_cmap14_validate in sfnt/ttcmap.c.(CVE-2015-9383)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple integer overflows in client/X11/xf_graphics.c     in FreeRDP allow remote attackers to have an     unspecified impact via the width and height to the (1)     xf_Pointer_New or (2) xf_Bitmap_Decompress function,     which causes an incorrect amount of memory to be     allocated.(CVE-2014-0250)

  - Integer overflow in the license_read_scope_list     function in libfreerdp/core/license.c in FreeRDP     through 1.0.2 allows remote RDP servers to cause a     denial of service (application crash) or possibly have     unspecified other impact via a large ScopeCount value     in a Scope List in a Server License Request     packet.(CVE-2014-0791)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the flatpak packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9,     and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus     messages to the host can be used to break out of the     sandbox, because whitespace handling in the proxy is     not identical to whitespace handling in the     daemon.(CVE-2018-6560)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow during the parsing of XML using the     Expat library. This vulnerability affects Firefox <     50.(CVE-2016-9063)

  - In libexpat before 2.2.8, crafted XML input could fool     the parser into changing from DTD parsing to document     parsing too early; a consecutive call to     XML_GetCurrentLineNumber (or     XML_GetCurrentColumnNumber) then resulted in a     heap-based buffer over-read.(CVE-2019-15903)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Exiv2 0.26 has a heap-based buffer over-read in     WebPImage::decodeChunks in     webpimage.cpp.(CVE-2018-14046)

  - There is a heap-based buffer over-read in the     Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2     0.27-RC3. A crafted input will lead to a remote denial     of service attack.(CVE-2018-20096)

  - There is a heap-based buffer over-read in     Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in     Exiv2 0.27-RC3. A crafted input will lead to a remote     denial of service attack.(CVE-2018-20098)

  - There is an infinite loop in     Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in     Exiv2 0.27-RC3. A crafted input will lead to a remote     denial of service attack.(CVE-2018-20099)

  - A PngChunk::parseChunkContent uncontrolled memory     allocation in Exiv2 through 0.27.1 allows an attacker     to cause a denial of service (crash due to an     std::bad_alloc exception) via a crafted PNG image     file.(CVE-2019-13112)

  - CiffDirectory::readDirectory() at crwimage_int.cpp in     Exiv2 0.26 has excessive stack consumption due to a     recursive function, leading to Denial of     service.(CVE-2018-17581)

  - In Exiv2 0.26 and previous versions,     PngChunk::readRawProfile in pngchunk_int.cpp may cause     a denial of service (application crash due to a     heap-based buffer over-read) via a crafted PNG     file.(CVE-2018-19535)

  - In types.cpp in Exiv2 0.26, a large size value may lead     to a SIGABRT during an attempt at memory allocation for     an Exiv2::Internal::PngChunk::zlibUncompress     call.(CVE-2018-10958)

  - An issue was discovered in Exiv2 0.26. readMetadata in     jp2image.cpp allows remote attackers to cause a denial     of service (SIGABRT) by triggering an incorrect     Safe::add call.(CVE-2018-10998)

  - An issue was discovered in Exiv2 0.26. The     Exiv2::Internal::PngChunk::parseTXTChunk function has a     heap-based buffer over-read.(CVE-2018-10999)

  - In Exiv2 0.26, Exiv2::PsdImage::readMetadata in     psdimage.cpp in the PSD image reader may suffer from a     denial of service (infinite loop) caused by an integer     overflow via a crafted PSD image file.(CVE-2018-19108)

  - In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp     (called from psdimage.cpp in the PSD image reader) may     suffer from a denial of service (heap-based buffer     over-read) caused by an integer overflow via a crafted     PSD image file.(CVE-2018-19107)

  - An issue was discovered in Exiv2 v0.26. The function     Exiv2::DataValue::copy in value.cpp has a NULL pointer     dereference.(CVE-2018-17282)

  - exiv2 0.26 contains a Stack out of bounds read in webp     parser(CVE-2017-1000126)

  - In Exiv2 0.26, there is a heap-based buffer over-read     in the Exiv2::Image::byteSwap4 function in image.cpp.
    Remote attackers can exploit this vulnerability to     disclose memory data or cause a denial of service via a     crafted TIFF file.(CVE-2017-17723)

  - Exiv2 0.26 has a heap-based buffer overflow in getData     in preview.cpp.(CVE-2018-11531)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Exempi before 2.4.4. The     ASF_Support::ReadHeaderObject function in     XMPFiles/source/FormatSupport/ASF_Support.cpp allows     remote attackers to cause a denial of service (infinite     loop) via a crafted .asf file.(CVE-2017-18236)

  - An issue was discovered in Exempi before 2.4.4. The     TradQT_Manager::ParseCachedBoxes function in     XMPFiles/source/FormatSupport/QuickTime_Support.cpp     allows remote attackers to cause a denial of service     (infinite loop) via crafted XMP data in a .qt     file.(CVE-2017-18238)

  - An issue was discovered in Exempi before 2.4.4. Integer     overflow in the Chunk class in     XMPFiles/source/FormatSupport/RIFF.cpp allows remote     attackers to cause a denial of service (infinite loop)     via crafted XMP data in a .avi file.(CVE-2017-18233)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - ELinks 0.12 and Twibright Links 2.3 have Missing SSL     Certificate Validation.(CVE-2012-6709)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - dwarf_getaranges in dwarf_getaranges.c in libdw in     elfutils before 2018-08-18 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     via a crafted file.(CVE-2018-16062)

  - dwarf_getaranges in dwarf_getaranges.c in libdw in     elfutils before 2018-08-18 allows remote attackers to     cause a denial of service (heap-based buffer over-read)     via a crafted file.(CVE-2018-16402)

  - libdw in elfutils 0.173 checks the end of the     attributes list incorrectly in dwarf_getabbrev in     dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c,     leading to a heap-based buffer over-read and an     application crash.(CVE-2018-16403)

  - Divide-by-zero vulnerabilities in the function     arlib_add_symbols() in arlib.c in elfutils 0.174 allow     remote attackers to cause a denial of service     (application crash) with a crafted ELF file, as     demonstrated by eu-ranlib, because a zero sh_entsize is     mishandled.(CVE-2018-18521)

  - A heap-based buffer over-read was discovered in the     function read_srclines in dwarf_getsrclines.c in libdw     in elfutils 0.175. A crafted input can cause     segmentation faults, leading to denial-of-service, as     demonstrated by eu-nm.(CVE-2019-7149)

  - An issue was discovered in elfutils 0.175. A     segmentation fault can occur in the function     elf64_xlatetom in libelf/elf32_xlatetom.c, due to     dwfl_segment_report_module not checking whether the dyn     data read from a core file is truncated. A crafted     input can cause a program crash, leading to     denial-of-service, as demonstrated by     eu-stack.(CVE-2019-7150)

  - In elfutils 0.175, a heap-based buffer over-read was     discovered in the function elf32_xlatetom in     elf32_xlatetom.c in libelf. A crafted ELF input can     cause a segmentation fault leading to denial of service     (program crash) because ebl_core_note does not reject     malformed core file notes.(CVE-2019-7665)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the e2fsprogs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The e2fsprogs package contains a number of utilities     for creating,checking, modifying, and correcting any     inconsistencies in second,third and fourth extended     (ext2/ext3/ext4) file systems. E2fsprogs contains     e2fsck (used to repair file system inconsistencies     after an unclean shutdown), mke2fs (used to initialize     a partition to contain an empty ext2 file system),     debugfs (used to examine the internal structure of a     file system, to manually repair a corrupted file     system, or to create test cases for e2fsck), tune2fs     (used to modify file system parameters), and most of     the other core ext2fs file system utilities.You should     install the e2fsprogs package if you need to manage the     performance of an ext2, ext3, or ext4 file     system.Security Fix(es):An exploitable code execution     vulnerability exists in the quota file functionality of     E2fsprogs 1.45.3. A specially crafted ext4 partition     can cause an out-of-bounds write on the heap, resulting     in code execution. An attacker can corrupt a partition     to trigger this vulnerability.(CVE-2019-5094)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An integer overflow flaw was found in the way the lzo     library decompressed certain archives compressed with     the LZO algorithm. An attacker could create a specially     crafted LZO-compressed input that, when decompressed by     an application using the lzo library, would cause that     application to crash or, potentially, execute arbitrary     code.(CVE-2014-4607)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2     (and Pigeonhole before 0.5.7.2), protocol processing     can fail for quoted strings. This occurs because '\0'     characters are mishandled, and can lead to     out-of-bounds writes and remote code     execution.(CVE-2019-11500)

  - A specially crafted email delivered over SMTP and     passed on to Dovecot by MTA can trigger an out of     bounds read resulting in potential sensitive     information disclosure and denial of service. In order     to trigger this vulnerability, an attacker needs to     send a specially crafted email message to the     server.(CVE-2017-14461)

  - A denial of service flaw was found in dovecot before     2.2.34. An attacker able to generate random SNI server     names could exploit TLS SNI configuration lookups,     leading to excessive memory usage and the process to     restart.(CVE-2017-15130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Dynamic Host Configuration Protocol (DHCP) is a     protocol that allows individual devices on an IP     network to get their own network configuration     information, including an IP address, a subnet mask,     and a broadcast address. The dhcp packages provide a     relay agent and ISC DHCP service required to enable and     administer DHCP on a network.Security Fix(es):There had     existed in one of the ISC BIND libraries a bug in a     function that was used by dhcpd when operating in     DHCPv6 mode. There was also a bug in dhcpd relating to     the use of this function per its documentation, but the     bug in the library function prevented this from causing     any harm. All releases of dhcpd from ISC contain copies     of this, and other, BIND libraries in combinations that     have been tested prior to release and are known to not     present issues like this. Some third-party packagers of     ISC software have modified the dhcpd source, BIND     source, or version matchup in ways that create the     crash potential. Based on reports available to ISC, the     crash probability is large and no analysis has been     done on how, or even if, the probability can be     manipulated by an attacker. Affects: Builds of dhcpd     versions prior to version 4.4.1 when using BIND     versions 9.11.2 or later, or BIND versions with     specific bug fixes backported to them. ISC does not     have access to comprehensive version lists for all     repackagings of dhcpd that are vulnerable. In     particular, builds from other vendors may also be     affected. Operators are advised to consult their vendor     documentation.(CVE-2019-6470)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap buffer overflow in the TFTP protocol handler in     cURL 7.19.4 to 7.65.3.(CVE-2019-5482)

  - curl before version 7.51.0 uses outdated IDNA 2003     standard to handle International Domain Names and this     may lead users to potentially and unknowingly issue     network transfer requests to the wrong     host.(CVE-2016-8625)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The add_job function in scheduler/ipp.c in CUPS before     2.2.6, when D-Bus support is enabled, can be crashed by     remote attackers by sending print jobs with an invalid     username, related to a D-Bus     notification.(CVE-2017-18248)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In GNU Coreutils through 8.29, chown-core.c in chown     and chgrp does not prevent replacement of a plain file     with a symlink during use of the POSIX '-R -L' options,     which allows local users to modify the ownership of     arbitrary files by leveraging a race     condition.(CVE-2017-18018)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL Pointer Dereference occurs in the function     TIFFPrintDirectory in tif_print.c in LibTIFF 4.0.9 when     using the tiffinfo tool to print crafted TIFF     information, a different vulnerability than     CVE-2017-18013. (This affects an earlier part of the     TIFFPrintDirectory function that was not addressed by     the CVE-2017-18013 patch.)(CVE-2018-7456)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A security feature bypass exists in Azure SSH Keypairs,     due to a change in the provisioning logic for some     Linux images that use cloud-init, aka 'Azure SSH     Keypairs Security Feature Bypass     Vulnerability'.(CVE-2019-0816)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Stack-based buffer overflow in cifskey.c or cifscreds.c     in cifs-utils before 6.4, as used in pam_cifscreds,     allows remote attackers to have unspecified impact via     unknown vectors.(CVE-2014-2830)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - cairo-truetype-subset.c in cairo 1.15.6 and earlier     allows remote attackers to cause a denial of service     (out-of-bounds read) because of mishandling of an     unexpected malloc(0) call.(CVE-2017-9814)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The dump_relocs_in_section function in objdump.c in GNU     Binutils 2.29.1 does not check for reloc count integer     overflows, which allows remote attackers to cause a     denial of service (excessive memory allocation, or     heap-based buffer overflow and application crash) or     possibly have unspecified other impact via a crafted PE     file.(CVE-2017-17122)

  - The _bfd_coff_read_string_table function in coffgen.c     in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.29.1, does     not properly validate the size of the external string     table, which allows remote attackers to cause a denial     of service (excessive memory consumption, or heap-based     buffer overflow and application crash) or possibly have     unspecified other impact via a crafted COFF     binary.(CVE-2017-17124)

  - The Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.29.1, allows remote     attackers to cause a denial of service (memory access     violation) or possibly have unspecified other impact     via a COFF binary in which a relocation refers to a     location after the end of the to-be-relocated     section.(CVE-2017-17121)

  - nm.c and objdump.c in GNU Binutils 2.29.1 mishandle     certain global symbols, which allows remote attackers     to cause a denial of service     (_bfd_elf_get_symbol_version_string buffer over-read     and application crash) or possibly have unspecified     other impact via a crafted ELF file.(CVE-2017-17125)

  - The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in     the Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.28, allows remote     attackers to cause a denial of service (buffer overflow     and application crash) or possibly have unspecified     other impact via a crafted binary file, as demonstrated     by mishandling of this file during 'objdump -D'     execution.(CVE-2017-9745)

  - The Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.28, is vulnerable to     an invalid read of size 4 due to NULL pointer     dereferencing of _bfd_elf_large_com_section. This     vulnerability causes programs that conduct an analysis     of binary programs using the libbfd library, such as     objcopy, to crash.(CVE-2017-8394)

  - dwarf2.c in the Binary File Descriptor (BFD) library     (aka libbfd), as distributed in GNU Binutils 2.29,     miscalculates DW_FORM_ref_addr die refs in the case of     a relocatable object file, which allows remote     attackers to cause a denial of service     (find_abstract_instance_name invalid memory read,     segmentation fault, and application     crash).(CVE-2017-15938)

  - The pe_bfd_read_buildid function in peicode.h in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29.1, does not validate     size and offset values in the data dictionary, which     allows remote attackers to cause a denial of service     (segmentation violation and application crash) or     possibly have unspecified other impact via a crafted PE     file.(CVE-2017-16832)

  - The getsym function in tekhex.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, allows remote attackers to cause     a denial of service (stack-based buffer over-read and     application crash) via a malformed tekhex     binary.(CVE-2017-12967)

  - The get_build_id function in opncls.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.28, allows remote     attackers to cause a denial of service (heap-based     buffer over-read and application crash) via a crafted     file in which a certain size field is larger than a     corresponding data field, as demonstrated by     mishandling within the objdump program.(CVE-2017-9955)

  - The getvalue function in tekhex.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.28, allows remote attackers to cause     a denial of service (stack-based buffer over-read and     application crash) via a crafted tekhex file, as     demonstrated by mishandling within the nm     program.(CVE-2017-9954)

  - GNU Binutils 2.28 allows remote attackers to cause a     denial of service (heap-based buffer over-read and     application crash) via a crafted ELF file, related to     MIPS GOT mishandling in the process_mips_specific     function in readelf.c.(CVE-2017-9041)

  - GNU Binutils 2.28 allows remote attackers to cause a     denial of service (memory consumption) via a crafted     ELF file with many program headers, related to the     get_program_headers function in     readelf.c.(CVE-2017-9039)

  - GNU Binutils 2.28 allows remote attackers to cause a     denial of service (heap-based buffer over-read and     application crash) via a crafted ELF file, related to     the byte_get_little_endian function in elfcomm.c, the     get_unwind_section_word function in readelf.c, and ARM     unwind information that contains invalid word     offsets.(CVE-2017-9038)

  - The dump_section_as_bytes function in readelf in GNU     Binutils 2.28 accesses a NULL pointer while reading     section contents in a corrupt binary, leading to a     program crash.(CVE-2017-7209)

  - The Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.28, has an invalid     read (of size 8) because the code to emit relocs     (bfd_elf_final_link function in bfd/elflink.c) does not     check the format of the input file before trying to     read the ELF reloc section header. The vulnerability     leads to a GNU linker (ld) program     crash.(CVE-2017-7299)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. a heap-based buffer over-read in     bfd_getl32 in libbfd.c allows an attacker to cause a     denial of service through a crafted PE file. This     vulnerability can be triggered by the executable     objdump.(CVE-2018-17360)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory access exists in     bfd_zalloc in opncls.c. Attackers could leverage this     vulnerability to cause a denial of service (application     crash) via a crafted ELF file.(CVE-2018-17359)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.31. An invalid memory access exists in
    _bfd_stab_section_find_nearest_line in syms.c.
    Attackers could leverage this vulnerability to cause a     denial of service (application crash) via a crafted ELF     file.(CVE-2018-17358)

  - The coff_slurp_reloc_table function in coffcode.h in     the Binary File Descriptor (BFD) library (aka libbfd),     as distributed in GNU Binutils 2.29.1, allows remote     attackers to cause a denial of service (NULL pointer     dereference and application crash) via a crafted COFF     based file.(CVE-2017-17123)

  - elf.c in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.29.1, does     not validate sizes of core notes, which allows remote     attackers to cause a denial of service (bfd_getl32     heap-based buffer over-read and application crash) via     a crafted object file, related to     elfcore_grok_netbsd_procinfo,     elfcore_grok_openbsd_procinfo, and     elfcore_grok_nto_status.(CVE-2017-17080)

  - _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (memory leak)     via a crafted ELF file.(CVE-2017-15225)

  - process_debug_info in dwarf.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, allows remote attackers to cause     a denial of service (infinite loop) via a crafted ELF     file that contains a negative size value in a CU     structure.(CVE-2017-14934)

  - dwarf2.c in the Binary File Descriptor (BFD) library     (aka libbfd), as distributed in GNU Binutils 2.29,     mishandles NULL files in a .debug_line file table,     which allows remote attackers to cause a denial of     service (NULL pointer dereference and application     crash) via a crafted ELF file, related to     concat_filename. NOTE: this issue is caused by an     incomplete fix for CVE-2017-15023.(CVE-2017-15939)

  - decode_line_info in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, allows remote attackers to cause     a denial of service (infinite loop) via a crafted ELF     file.(CVE-2017-14932)

  - dwarf2.c in the Binary File Descriptor (BFD) library     (aka libbfd), as distributed in GNU Binutils 2.29, does     not validate the DW_AT_name data type, which allows     remote attackers to cause a denial of service     (bfd_hash_hash NULL pointer dereference, or     out-of-bounds access, and application crash) via a     crafted ELF file, related to scan_unit_for_symbols and     parse_comp_unit.(CVE-2017-15022)

  - bfd_get_debug_link_info_1 in opncls.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (heap-based     buffer over-read and application crash) via a crafted     ELF file, related to bfd_getl32.(CVE-2017-15021)

  - Memory leak in decode_line_info in dwarf2.c in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (memory     consumption) via a crafted ELF file.(CVE-2017-14930)

  - decode_line_info in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, allows remote attackers to cause     a denial of service (divide-by-zero error and     application crash) via a crafted ELF     file.(CVE-2017-15025)

  - scan_unit_for_symbols in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, allows remote attackers to cause     a denial of service (NULL pointer dereference and     application crash) via a crafted ELF     file.(CVE-2017-14940)

  - decode_line_info in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.29, mishandles a length calculation,     which allows remote attackers to cause a denial of     service (heap-based buffer over-read and application     crash) via a crafted ELF file, related to     read_1_byte.(CVE-2017-14939)

  - _bfd_elf_slurp_version_tables in elf.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (excessive     memory allocation and application crash) via a crafted     ELF file.(CVE-2017-14938)

  - The pe_print_idata function in peXXigen.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, mishandles HintName     vector entries, which allows remote attackers to cause     a denial of service (heap-based buffer over-read and     application crash) via a crafted PE file, related to     the bfd_getl16 function.(CVE-2017-14529)

  - The read_section function in dwarf2.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (parse_comp_unit     heap-based buffer over-read and application crash) via     a crafted ELF file.(CVE-2017-14129)

  - The decode_line_info function in dwarf2.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, allows remote     attackers to cause a denial of service (read_1_byte     heap-based buffer over-read and application crash) via     a crafted ELF file.(CVE-2017-14128)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - 'managed-keys' is a feature which allows a BIND     resolver to automatically maintain the keys used by     trust anchors which operators configure for use in     DNSSEC validation. Due to an error in the managed-keys     feature it is possible for a BIND server which uses     managed-keys to exit due to an assertion failure if,     during key rollover, a trust anchor's keys are replaced     with keys which use an unsupported algorithm. Versions     affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1,     9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3     of BIND 9 Supported Preview Edition. Versions 9.13.0 ->     9.13.6 of the 9.13 development branch are also     affected. Versions prior to BIND 9.9.0 have not been     evaluated for vulnerability to     CVE-2018-5745.(CVE-2018-5745)

  - ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1,     and 9.11.x through 9.11.0b1 allows primary DNS servers     to cause a denial of service (secondary DNS server     crash) via a large AXFR response, and possibly allows     IXFR servers to cause a denial of service (IXFR client     crash) via a large IXFR response and allows remote     authenticated users to cause a denial of service     (primary DNS server crash) via a large UPDATE     message.(CVE-2016-6170)

  - Controls for zone transfers may not be properly applied     to Dynamically Loadable Zones (DLZs) if the zones are     writable Versions affected: BIND 9.9.0 -> 9.10.8-P1,     9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions     9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview     Edition. Versions 9.13.0 -> 9.13.6 of the 9.13     development branch are also affected. Versions prior to     BIND 9.9.0 have not been evaluated for vulnerability to     CVE-2019-6465.(CVE-2019-6465)

  - To provide fine-grained controls over the ability to     use Dynamic DNS (DDNS) to update records in a zone,     BIND 9 provides a feature called update-policy. Various     rules can be configured to limit the types of updates     that can be performed by a client, depending on the key     used when sending the update request. Unfortunately,     some rule types were not initially documented, and when     documentation for them was added to the Administrator     Reference Manual (ARM) in change #3112, the language     that was added to the ARM at that time incorrectly     described the behavior of two rule types,     krb5-subdomain and ms-subdomain. This incorrect     documentation could mislead operators into believing     that policies they had configured were more restrictive     than they actually were. This affects BIND versions     prior to BIND 9.11.5 and BIND 9.12.3.(CVE-2018-5741)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - 389-ds-base before versions 1.3.8.5, 1.4.0.12 is     vulnerable to a Cleartext Storage of Sensitive     Information. By default, when the Replica and/or     retroChangeLog plugins are enabled, 389-ds-base stores     passwords in plaintext format in their respective     changelog files. An attacker with sufficiently high     privileges, such as root or Directory Manager, can     query these files in order to retrieve plaintext     passwords.(CVE-2018-10871)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libguestfs-winsupport package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An integer underflow issue exists in ntfs-3g 2017.3.23.
    A local attacker could potentially exploit this by     running /bin/ntfs-3g with specially crafted arguments     from a specially crafted directory to cause a heap     buffer overflow, resulting in a crash or the ability to     execute arbitrary code. In installations where     /bin/ntfs-3g is a setuid-root binary, this could lead     to a local escalation of privileges.(CVE-2019-9755)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gpgme package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GnuPG Made Easy (GPGME) is a library designed to make     access to GnuPG easier for applications. It provides a     high-level crypto API for encryption, decryption,     signing, signature verification and key management.

  - Security fix(es):

  - Multiple heap-based buffer overflows in the     status_handler function in (1) engine-gpgsm.c and (2)     engine-uiserver.c in GPGME before 1.5.1 allow remote     attackers to cause a denial of service (crash) and     possibly execute arbitrary code via vectors related to     'different line lengths in a specific     order.'(CVE-2014-3564)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
130883	EulerOS 2.0 SP5 : nss (EulerOS-SA-2019-2174)	Medium
130882	EulerOS 2.0 SP5 : netpbm (EulerOS-SA-2019-2173)	Medium
130881	EulerOS 2.0 SP5 : libXfont (EulerOS-SA-2019-2172)	Low
130880	EulerOS 2.0 SP5 : libtasn1 (EulerOS-SA-2019-2171)	Medium
130879	EulerOS 2.0 SP5 : libsamplerate (EulerOS-SA-2019-2170)	Medium
130878	EulerOS 2.0 SP5 : libreoffice (EulerOS-SA-2019-2169)	High
130877	EulerOS 2.0 SP5 : libnl (EulerOS-SA-2019-2168)	High
130876	EulerOS 2.0 SP5 : libgxps (EulerOS-SA-2019-2167)	Medium
130875	EulerOS 2.0 SP5 : libgsf (EulerOS-SA-2019-2166)	Medium
130874	EulerOS 2.0 SP5 : lftp (EulerOS-SA-2019-2165)	High
130873	EulerOS 2.0 SP5 : less (EulerOS-SA-2019-2164)	Critical
130872	EulerOS 2.0 SP5 : lcms2 (EulerOS-SA-2019-2163)	Medium
130871	EulerOS 2.0 SP5 : krb5 (EulerOS-SA-2019-2162)	High
130870	EulerOS 2.0 SP5 : irssi (EulerOS-SA-2019-2161)	High
130869	EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-2160)	High
130868	EulerOS 2.0 SP5 : icu (EulerOS-SA-2019-2159)	High
130867	EulerOS 2.0 SP5 : http-parser (EulerOS-SA-2019-2158)	Medium
130866	EulerOS 2.0 SP5 : httpd (EulerOS-SA-2019-2157)	Medium
130865	EulerOS 2.0 SP5 : gvfs (EulerOS-SA-2019-2156)	Low
130864	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2019-2155)	Medium
130863	EulerOS 2.0 SP5 : glib2 (EulerOS-SA-2019-2154)	High
130862	EulerOS 2.0 SP5 : git (EulerOS-SA-2019-2153)	High
130861	EulerOS 2.0 SP5 : giflib (EulerOS-SA-2019-2152)	Medium
130860	EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2019-2151)	High
130859	EulerOS 2.0 SP5 : gegl (EulerOS-SA-2019-2150)	Medium
130858	EulerOS 2.0 SP5 : gd (EulerOS-SA-2019-2149)	Medium
130857	EulerOS 2.0 SP5 : freetype (EulerOS-SA-2019-2148)	High
130856	EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2019-2147)	High
130855	EulerOS 2.0 SP5 : flatpak (EulerOS-SA-2019-2146)	Medium
130854	EulerOS 2.0 SP5 : expat (EulerOS-SA-2019-2145)	High
130853	EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2144)	High
130852	EulerOS 2.0 SP5 : exempi (EulerOS-SA-2019-2143)	Medium
130851	EulerOS 2.0 SP5 : elinks (EulerOS-SA-2019-2142)	Medium
130850	EulerOS 2.0 SP5 : elfutils (EulerOS-SA-2019-2141)	High
130849	EulerOS 2.0 SP5 : e2fsprogs (EulerOS-SA-2019-2140)	Medium
130848	EulerOS 2.0 SP5 : dump (EulerOS-SA-2019-2139)	Medium
130847	EulerOS 2.0 SP5 : dovecot (EulerOS-SA-2019-2138)	High
130846	EulerOS 2.0 SP5 : dhcp (EulerOS-SA-2019-2137)	Medium
130845	EulerOS 2.0 SP5 : curl (EulerOS-SA-2019-2136)	High
130844	EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-2135)	Low
130843	EulerOS 2.0 SP5 : coreutils (EulerOS-SA-2019-2134)	Low
130842	EulerOS 2.0 SP5 : compat-libtiff3 (EulerOS-SA-2019-2133)	Medium
130841	EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2019-2132)	Low
130840	EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2019-2131)	Critical
130839	EulerOS 2.0 SP5 : cairo (EulerOS-SA-2019-2130)	Medium
130838	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2129)	High
130837	EulerOS 2.0 SP5 : bind (EulerOS-SA-2019-2128)	Medium
130836	EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2019-2127)	Medium
130835	EulerOS 2.0 SP5 : libguestfs-winsupport (EulerOS-SA-2019-2126)	Medium
130834	EulerOS 2.0 SP5 : gpgme (EulerOS-SA-2019-2125)	Medium

Huawei Local Security Checks Family for Nessus