According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP     server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of     Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the     server to the client. The greatest threat that this flaw poses is to application availability.
    (CVE-2021-3733)

  - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may     allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop,     consuming CPU time. The highest threat from this vulnerability is to system availability. (CVE-2021-3737)

  - A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV     (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This     flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back     to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which     otherwise would not have been possible. (CVE-2021-4189)

  - A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform     Resource Locator (URL) strings into components. The issue involves how the urlparse method does not     sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to     input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1,     3.9.5, 3.8.11, 3.7.11 and 3.6.14. (CVE-2022-0391)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV     (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This     flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back     to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which     otherwise would not have been possible. (CVE-2021-4189)

  - A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform     Resource Locator (URL) strings into components. The issue involves how the urlparse method does not     sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to     input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1,     3.9.5, 3.8.11, 3.7.11 and 3.6.14. (CVE-2022-0391)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3254 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    The following packages have been upgraded to a later upstream version: rh-python38-python (3.8.11).
    (BZ#1969523)

    Security Fix(es):

    * python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)

    * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

    * python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)

    * python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)

    * python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to     buffer overflow (CVE-2020-36242)

    * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)

    * python: Information disclosure via pydoc (CVE-2021-3426)

    * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute     arbitrary code (CVE-2021-20095)

    * python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

    * python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

    * python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

    * python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

    * python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional information

    * Changes in the default separator for the Python urllib parsing functions

    To mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for     the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (&)     and semicolon (;) to only an ampersand.

    The change of the default separator is potentially backwards incompatible, therefore Red Hat provides a     way to configure the behavior in Python packages where the default separator has been changed. In     addition, the affected urllib parsing functions issue a warning if they detect that a customers     application has been affected by the change.

    For more information, see the Knowledgebase article Mitigation of Web Cache Poisoning in the Python     urllib library (CVE-2021-23336) linked from the References section.

    * The Python ipaddress module no longer allows leading zeros in IPv4 addresses

    To mitigate CVE-2021-29921, the Python ipaddress module now rejects IPv4 addresses with leading zeros     with an AddressValueError: Leading zeros are not permitted error.

    Customers who rely on the previous behavior can pre-process their IPv4 address inputs to strip the leading     zeros off. For details, see the Red Hat Software Collections 3.7 Release Notes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python27 installed on the remote host is prior to 2.7.18-2.142. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1593 advisory.

    In Python3's Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
    (CVE-2020-27619)

    The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

    There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP     server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of     Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the     server to the client. The greatest threat that this flaw poses is to application availability.
    (CVE-2021-3733)

    A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may     allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop,     consuming CPU time. The highest threat from this vulnerability is to system availability. (CVE-2021-3737)

    ftplib should not use the host from the PASV response (CVE-2021-4189)

    A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform     Resource Locator (URL) strings into components. The issue involves how the urlparse method does not     sanitize input and allows characters like r and n in the URL path. This flaw allows an attacker to input a     crafted URL, leading to injection attacks. (CVE-2022-0391)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5342-1 advisory.

    David Schwrer discovered that Python incorrectly handled certain inputs. An attacker could possibly use     this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)

    It was discovered that Python incorrectly handled certain FTP requests. An attacker could possibly use     this issue to expose sensitive information. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM,     and Ubuntu 18.04 LTS. (CVE-2021-4189)

    It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this     issue to execute arbitrary code. (CVE-2022-0391)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1821 advisory.

    * python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)

    * python: ftplib should not use the host from the PASV response (CVE-2021-4189)

    * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)

    * python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)

    * python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6457 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python(mailcap): findmatch() function does not sanitise the second argument (CVE-2015-20107)

    * python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
170793	EulerOS Virtualization 3.0.2.2 : python (EulerOS-SA-2023-1284)	Nessus	Huawei Local Security Checks	1/30/2023	9/5/2023	high
165885	EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2022-2529)	Nessus	Huawei Local Security Checks	10/9/2022	10/10/2023	high
152781	RHEL 7 : rh-python38 (RHSA-2021:3254)	Nessus	Red Hat Local Security Checks	8/24/2021	9/10/2025	high
162008	Amazon Linux AMI : python27 (ALAS-2022-1593)	Nessus	Amazon Linux Local Security Checks	6/10/2022	12/11/2024	critical
159255	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Python vulnerabilities (USN-5342-1)	Nessus	Ubuntu Local Security Checks	3/28/2022	9/3/2025	high
161115	AlmaLinux 8 : python27:2.7 (ALSA-2022:1821)	Nessus	Alma Linux Local Security Checks	5/12/2022	1/13/2025	high
164958	RHEL 8 : python3 (RHSA-2022:6457)	Nessus	Red Hat Local Security Checks	9/13/2022	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

critical

high

high

high