According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In GNOME GLib 2.56.1,     g_markup_parse_context_end_parse() in gmarkup.c has a     NULL pointer dereference.(CVE-2018-16428)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

  - gio/gsocketclient.c in GNOME GLib 2.59.2 does not     ensure that a parent GTask remains alive during the     execution of a connection-attempting enumeration, which     allows remote attackers to cause a denial of service     (g_socket_client_connected_callback mishandling and     application crash) via a crafted web site, as     demonstrated by GNOME Web (aka     Epiphany).(CVE-2019-9633)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
132123	EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2019-2588)	Nessus	Huawei Local Security Checks	2019/12/18	2021/01/06	high
131901	EulerOS 2.0 SP2 : glib2 (EulerOS-SA-2019-2409)	Nessus	Huawei Local Security Checks	2019/12/10	2021/01/06	high

Plugins Search