This update for java-1_7_1-ibm fixes the following issues :

  - Version update to 7.1-4.5 bsc#1038505

  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in     inftrees.c

  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in     inffast.c

  - CVE-2016-9842: zlib: Undefined left shift of negative     number

  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer

  - CVE-2017-1289: IBM JDK: XML External Entity Injection     (XXE) error when processing XML data

  - CVE-2017-3509: OpenJDK: improper re-use of NTLM     authenticated connections

  - CVE-2017-3511: OpenJDK: untrusted extension directories     search path in Launcher

  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification

  - CVE-2017-3533: OpenJDK: newline injection in the FTP     client

  - CVE-2017-3544: OpenJDK: newline injection in the SMTP     client

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9841)

  - The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving left shifts of negative integers. (CVE-2016-9842)

  - The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving big-endian CRC calculation. (CVE-2016-9843)

  - zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many     distant matches. (CVE-2018-25032)

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS that is prior to 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - AppSandbox
 - AppleScript
 - Application Firewall
 - ATS
 - Audio
 - CFNetwork
 - CFNetwork Proxies
 - CFString
 - Captive Network Assistant
 - CoreAudio
 - CoreText
 - DesktopServices
 - Directory Utility
 - file
 - Fonts
 - fsck_msdos
 - HFS
 - Heimdal
 - HelpViewer
 - IOFireWireFamily
 - ImageIO
 - Installer
 - Kernel
 - kext tools
 - libarchive
 - libc
 - libexpat
 - Mail
 - Mail Drafts
 - ntp
 - Open Scripting Architecture
 - PCRE
 - Postfix
 - Quick Look
 - QuickTime
 - Remote Management
 - SQLite
 - Sandbox
 - Screen Lock
 - Security
 - Spotlight
 - WebKit
 - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

ID	Name	Product	Family	Published	Updated	Severity
100376	SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:1385-1)	Nessus	SuSE Local Security Checks	5/24/2017	1/6/2021	critical
169365	EulerOS Virtualization 2.10.0 : mariadb-connector-c (EulerOS-SA-2022-2911)	Nessus	Huawei Local Security Checks	12/28/2022	9/11/2023	critical
169846	EulerOS Virtualization 2.9.0 : mariadb-connector-c (EulerOS-SA-2023-1227)	Nessus	Huawei Local Security Checks	1/11/2023	9/8/2023	critical
700511	macOS < 10.13 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	4/10/2019	4/10/2019	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/17/2019	4/17/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical