According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Stack-based buffer overflow in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) allows remote servers to cause a denial     of service (crash) or possibly unspecified other impact     via a flood of crafted ICMP and UDP     packets.(CVE-2016-4429)

  - Integer overflow in the strxfrm function in the GNU C     Library (aka glibc or libc6) before 2.21 allows     context-dependent attackers to cause a denial of     service (crash) or possibly execute arbitrary code via     a long string, which triggers a stack-based buffer     overflow.(CVE-2015-8982)

  - The posix_spawn_file_actions_addopen function in glibc     before 2.20 does not copy its path argument in     accordance with the POSIX specification, which allows     context-dependent attackers to trigger use-after-free     vulnerabilities.(CVE-2014-4043)

  - res_query in libresolv in glibc before 2.25 allows     remote attackers to cause a denial of service (NULL     pointer dereference and process crash).(CVE-2015-5180)

  - A buffer overflow has been discovered in the GNU C     Library (aka glibc or libc6) in the
    __mempcpy_avx512_no_vzeroupper function when particular     conditions are met. An attacker could use this     vulnerability to cause a denial of service or     potentially execute code.(CVE-2018-11237)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     proceed_next_node in posix/regexec.c has a heap-based     buffer over-read via an attempted case-insensitive     regular-expression match.(CVE-2019-9169)

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

  - The DNS stub resolver in the GNU C Library (aka glibc     or libc6) before version 2.26, when EDNS support is     enabled, will solicit large UDP responses from name     servers, potentially simplifying off-path DNS spoofing     attacks due to IP fragmentation.(CVE-2017-12132)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glibc fixes the following security issues :

CVE-2017-15670: Prevent off-by-one error that lead to a heap-based buffer overflow in the glob function, related to the processing of home directories using the ~ operator followed by a long string (bsc#1064583)

CVE-2017-15804: The glob function contained a buffer overflow during unescaping of user names with the ~ operator (bsc#1064580)

CVE-2015-5180: res_query in libresolv allowed remote attackers to cause a denial of service (NULL pointer dereference and process crash) (bsc#941234).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL     pointer dereference and process crash). (CVE-2015-5180)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0805 advisory.

    - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
    - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
    - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)
    - CVE-2017-1213: Fragmentation attacks possible when ENDS0 is enabled       (#1487063)
    - CVE-2016-3706: Stack (frame) overflow in getaddrinfo when called       with AF_INET, AF_INET6 (#1329674)
    - CVE-2015-5180: resolv: Fix crash with internal QTYPE (#1497131)
    - CVE-2014-9402: denial of service in getnetbyname function (#1497132)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for glibc is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es) :

* glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation (CVE-2018-1000001)

* glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670)

* glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804)

* glibc: denial of service in getnetbyname function (CVE-2014-9402)

* glibc: DNS resolver NULL pointer dereference with crafted record type (CVE-2015-5180)

* glibc: Fragmentation attacks possible when EDNS0 is enabled (CVE-2017-12132)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank halfdog for reporting CVE-2018-1000001.
The CVE-2015-5180 issue was discovered by Florian Weimer (Red Hat Product Security).

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

This update for glibc fixes the following issues :

Security issue fixed :

CVE-2015-5180: Fixed a NULL pointer dereference with internal QTYPE (bsc#941234).

Feature work: IBM zSeries arch13 hardware support in glibc added (fate#327072, bsc#1132678)

Other issue addressed: Fixed a concurrency issue with ldconfig (bsc#1117993).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201706-19 (GNU C Library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the GNU C Library.
      Please review the CVE identifiers and Qualys&rsquo; security advisory       referenced below for details.
  Impact :

    An attacker could possibly execute arbitrary code with the privileges of       the process, escalate privileges or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3239-1 advisory.

    It was discovered that the GNU C Library incorrectly handled the strxfrm() function. An attacker could use     this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected     Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8982)

    It was discovered that an integer overflow existed in the _IO_wstr_overflow() function of the GNU C     Library. An attacker could use this to cause a denial of service or possibly execute arbitrary code. This     issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8983)

    It was discovered that the fnmatch() function in the GNU C Library did not properly handle certain     malformed patterns. An attacker could use this to cause a denial of service. This issue only affected     Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8984)

    Alexander Cherepanov discovered a stack-based buffer overflow in the glob implementation of the GNU C     Library. An attacker could use this to specially craft a directory layout and cause a denial of service.
    (CVE-2016-1234)

    Florian Weimer discovered a NULL pointer dereference in the DNS resolver of the GNU C Library. An attacker     could use this to cause a denial of service. (CVE-2015-5180)

    Michael Petlan discovered an unbounded stack allocation in the getaddrinfo() function of the GNU C     Library. An attacker could use this to cause a denial of service. (CVE-2016-3706)

    Aldy Hernandez discovered an unbounded stack allocation in the sunrpc implementation in the GNU C Library.
    An attacker could use this to cause a denial of service. (CVE-2016-4429)

    Tim Ruehsen discovered that the getaddrinfo() implementation in the GNU C Library did not properly track     memory allocations. An attacker could use this to cause a denial of service. This issue only affected     Ubuntu 16.04 LTS. (CVE-2016-5417)

    Andreas Schwab discovered that the GNU C Library on ARM 32-bit platforms did not properly set up execution     contexts. An attacker could use this to cause a denial of service. (CVE-2016-6323)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0805 advisory.

  - glibc: denial of service in getnetbyname function (CVE-2014-9402)

  - glibc: DNS resolver NULL pointer dereference with crafted record type (CVE-2015-5180)

  - glibc: Fragmentation attacks possible when EDNS0 is enabled (CVE-2017-12132)

  - glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670)

  - glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804)

  - glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation     (CVE-2018-1000001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2926:01 advisory.

    * glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation     (CVE-2018-1000001)
    * glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670)
    * glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804)
    * glibc: denial of service in getnetbyname function (CVE-2014-9402)
    * glibc: DNS resolver NULL pointer dereference with crafted record type (CVE-2015-5180)
    * glibc: Fragmentation attacks possible when EDNS0 is enabled (CVE-2017-12132)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
129223	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2019-2030)	Nessus	Huawei Local Security Checks	9/24/2019	1/6/2021	critical
117804	SUSE SLES11 Security Update : glibc (SUSE-SU-2018:2883-1)	Nessus	SuSE Local Security Checks	9/27/2018	8/1/2024	critical
218790	Linux Distros Unpatched Vulnerability : CVE-2015-5180	Nessus	Misc.	3/4/2025	8/10/2026	high
109105	Oracle Linux 7 : glibc (ELSA-2018-0805)	Nessus	Oracle Linux Local Security Checks	4/18/2018	11/1/2024	critical
109371	CentOS 7 : glibc (CESA-2018:0805)	Nessus	CentOS Local Security Checks	4/27/2018	10/22/2024	critical
126337	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2019:1716-1)	Nessus	SuSE Local Security Checks	6/28/2019	5/14/2024	high
100945	GLSA-201706-19 : GNU C Library: Multiple vulnerabilities (Stack Clash)	Nessus	Gentoo Local Security Checks	6/21/2017	12/15/2025	high
97856	Ubuntu 14.04 LTS / 16.04 LTS : GNU C Library vulnerabilities (USN-3239-1)	Nessus	Ubuntu Local Security Checks	3/21/2017	12/29/2025	high
108985	RHEL 7 : glibc (RHSA-2018:0805)	Nessus	Red Hat Local Security Checks	4/11/2018	11/7/2024	critical
288895	MiracleLinux 7 : glibc-2.17-222.el7 (AXSA:2018-2926:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	2/10/2026	critical

Detections

Analytics

Plugins Search

critical

critical

high

critical

critical

high

high

high

critical

critical