According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In glibc 2.26 and earlier there is confusion in the     usage of getcwd() by realpath() which can be used to     write before the destination buffer leading to a buffer     underflow and potential code     execution.(CVE-2018-1000001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201804-02 (glibc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in glibc. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly execute arbitrary code, escalate privileges,       cause a Denial of Service condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

According to the version of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In glibc 2.26 and earlier there is confusion in the     usage of getcwd() by realpath() which can be used to     write before the destination buffer leading to a buffer     underflow and potential code     execution.(CVE-2018-1000001)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glibc fixes the following issues :

  - A privilege escalation bug in the realpath() function     has been fixed. [CVE-2018-1000001, bsc#1074293]

  - A memory leak and a buffer overflow in the dynamic ELF     loader has been fixed. [CVE-2017-1000408,     CVE-2017-1000409, bsc#1071319]

  - An issue in the code handling RPATHs was fixed that     could have been exploited by an attacker to execute code     loaded from arbitrary libraries. [CVE-2017-16997,     bsc#1073231]

  - A potential crash caused by a use-after-free bug in     pthread_create() has been fixed. [bsc#1053188]

  - A bug that prevented users to build shared objects which     use the optimized libmvec.so API has been fixed.
    [bsc#1070905]

  - A memory leak in the glob() function has been fixed.
    [CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,     bsc#1064569, bsc#1064580, bsc#1064583]

  - A bug that would lose the syscall error code value in     case of crashes has been fixed. [bsc#1063675]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glibc fixes the following issues: Security issues :

  - CVE-2017-8804: Fix memory leak after deserialization     failure in xdr_bytes, xdr_string (bsc#1037930)

  - CVE-2017-12132: Reduce EDNS payload size to 1200 bytes     (bsc#1051791)

  - CVE-2018-6485,CVE-2018-6551: Fix integer overflows in     internal memalign and malloc functions (bsc#1079036)

  - CVE-2018-1000001: Avoid underflow of malloced area in     realpath (bsc#1074293) Also a non security issue was     fixed :

  - Do not fail if one of the two responses to AF_UNSPEC     fails (bsc#978209)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4768-1 advisory.

    It was discovered that musl did not properly handle kernel syscalls. An attacker could use this     vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. (CVE-2018-1000001)

    It was discovered that musl did not properly handle the parsing of DNS response codes. A remote attacker     could use this vulnerability to cause resource consumption (infinite loop), denial of service, or possibly     execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-3484)

    It was discovered that musl did not properly handle the parsing of DNS response codes. A remote attacker     could use this vulnerability to cause resource consumption (infinite loop), denial of service, or possibly     execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-15650)

    It was discovered that musl did not properly handle the parsing of ipv6 addresses. An attacker could use     this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. This issue     only affected Ubuntu 14.04 ESM. (CVE-2015-1817)

    It was discovered that TRE library, used by musl, did not properly handle certain inputs. An attacker     could use this vulnerability to cause a denial of service (crash). (CVE-2016-8859)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has glibc packages installed that are affected by multiple vulnerabilities:

  - The GNU C Library (aka glibc or libc6) before 2.27     contains an off-by-one error leading to a heap-based     buffer overflow in the glob function in glob.c, related     to the processing of home directories using the ~     operator followed by a long string. (CVE-2017-15670)

  - The DNS stub resolver in the GNU C Library (aka glibc or     libc6) before version 2.26, when EDNS support is     enabled, will solicit large UDP responses from name     servers, potentially simplifying off-path DNS spoofing     attacks due to IP fragmentation. (CVE-2017-12132)

  - The glob function in glob.c in the GNU C Library (aka     glibc or libc6) before 2.27 contains a buffer overflow     during unescaping of user names with the ~ operator.
    (CVE-2017-15804)

  - res_query in libresolv in glibc before 2.25 allows     remote attackers to cause a denial of service (NULL     pointer dereference and process crash). (CVE-2015-5180)

  - The nss_dns implementation of getnetbyname in GNU C     Library (aka glibc) before 2.21, when the DNS backend in     the Name Service Switch configuration is enabled, allows     remote attackers to cause a denial of service (infinite     loop) by sending a positive answer while a network name     is being process. (CVE-2014-9402)

  - In glibc 2.26 and earlier there is confusion in the     usage of getcwd() by realpath() which can be used to     write before the destination buffer leading to a buffer     underflow and potential code execution.
    (CVE-2018-1000001)

  - Stack-based buffer overflow in the getaddrinfo function     in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka     glibc or libc6) allows remote attackers to cause a     denial of service (crash) via vectors involving hostent     conversion. NOTE: this vulnerability exists because of     an incomplete fix for CVE-2013-4458. (CVE-2016-3706)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

啟用 EDNS0 時，可能會發生片段攻擊。GNU C 程式庫 (亦即 glibc 或 libc6) 2.26 之前版本中的 DNS stub 解析器在啟用 EDNS 支援時，將會從名稱伺服器請求大型 UDP 回應，進而可能因為 IP 片段而簡化偏離路徑的 DNS 偽造攻擊。(CVE-2017-12132) 在具有 GLOB_TILDE 的 glob 中發生緩衝區溢位。2.27 版之前的 GNU C 程式庫 (亦即 glibc 或 libc6) 含有差一錯誤，進而導致 glob.c 的 glob 函式中發生堆積型緩衝區溢位，這與使用 ~ 運算子後面緊接著一個非常長的字串處理主目錄有關。(CVE-2017-15670) 在 getnetbyname 函式中發生拒絕服務。在 GNU C 程式庫 (亦即 glibc) 2.21 之前版本中，getnetbyname 的 nss_dns 實作在啟用 Name Service Switch 組態中的 DNS 後端時，可讓遠端攻擊者透過在處理網路名稱時傳送正面回應，造成拒絕服務 (無限迴圈)。(CVE-2014-9402) 在 glibc 2.25 之前版本的 libresolv 中，具有特製記錄類型 res_query 的 DNS 解析器 NULL 指標解除參照可讓遠端攻擊者造成拒絕服務 (NULL 指標解除參照和處理程序損毀)。(CVE-2015-5180) 當 getcwd() 傳回相對路徑時，realpath() 發生緩衝區溢位，導致權限提升。在 glibc 2.26 和更舊版本中，realpath() 對 getcwd() 的使用會產生混淆，可用於在目的地緩衝區之前寫入，進而導致緩衝區反向溢位並可能執行程式碼。(CVE-2018-1000001) 在具有 ~ 運算子的使用名稱解除逸出期間發生緩衝區溢位。在 2.27 版之前的 GNU C 程式庫 (亦即 glibc 或 libc6) 中，glob.c 內的 glob 函式在具有 ~ 運算子的使用名稱解除逸出期間含有一個緩衝區溢位。(CVE-2017-15804)

安全性修正：- glibc：當 getcwd() 傳回相對路徑時，realpath() 發生緩衝區反向溢位，導致權限提升 (CVE-2018-1000001) - glibc：在具有 GLOB_TILDE 的 glob 中發生緩衝區溢位 (CVE-2017-15670) - glibc：在具有 ~ 運算子的使用名稱解除逸出期間發生緩衝區溢位 (CVE-2017-15804) - glibc：在 getnetbyname 函式中發生拒絕服務 (CVE-2014-9402) - glibc：具有特製記錄類型的 DNS 解析器 NULL 指標解除參照 (CVE-2015-5180) - glibc：啟用 EDNS0 時，可能會發生片段攻擊 (CVE-2017-12132) 其他變更：

This update for glibc fixes the following issues :

  - A privilege escalation bug in the realpath() function     has been fixed. [CVE-2018-1000001, bsc#1074293]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - stdlib/canonicalize.c in the GNU C Library (aka glibc     or libc6) 2.27 and earlier, when processing very long     pathname arguments to the realpath function, could     encounter an integer overflow on 32-bit architectures,     leading to a stack-based buffer overflow and,     potentially, arbitrary code execution.(CVE-2018-11236)

  - An integer overflow vulnerability was found in     hcreate() and hcreate_r() functions which could result     in an out-of-bounds memory access. This could lead to     application crash or, potentially, arbitrary code     execution.(CVE-2015-8778)

  - A stack-based buffer overflow was found in the way the     libresolv library performed dual A/AAAA DNS queries. A     remote attacker could create a specially crafted DNS     response which could cause libresolv to crash or,     potentially, execute code with the permissions of the     user running the library. Note: this issue is only     exposed when libresolv is called from the nss_dns NSS     service module.(CVE-2015-7547)

  - A flaw was found in the regular expression matching     routines that process multibyte character input. If an     application utilized the glibc regular expression     matching mechanism, an attacker could provide     specially-crafted input that, when processed, would     cause the application to crash.(CVE-2013-0242)

  - A flaw was found in the way memory was being allocated     on the stack for user space binaries. If heap (or     different memory region) and stack memory regions were     adjacent to each other, an attacker could use this flaw     to jump over the stack guard gap, cause controlled     memory corruption on process stack or the adjacent     memory region, and thus increase their privileges on     the system. This is glibc-side mitigation which blocks     processing of LD_LIBRARY_PATH for programs running in     secure-execution mode and reduces the number of     allocations performed by the processing of LD_AUDIT,     LD_PRELOAD, and LD_HWCAP_MASK, making successful     exploitation of this issue more     difficult.(CVE-2017-1000366)

  - The DNS stub resolver in the GNU C Library (aka glibc     or libc6) before version 2.26, when EDNS support is     enabled, will solicit large UDP responses from name     servers, potentially simplifying off-path DNS spoofing     attacks due to IP fragmentation.(CVE-2017-12132)

  - It was found that the files back end of Name Service     Switch (NSS) did not isolate iteration over an entire     database from key-based look-up API calls. An     application performing look-ups on a database while     iterating over it could enter an infinite loop, leading     to a denial of service.(CVE-2014-8121)

  - Stack-based buffer overflow in the getaddrinfo function     in sysdeps/posix/getaddrinfo.c in the GNU C Library     (aka glibc or libc6) allows remote attackers to cause a     denial of service (crash) via vectors involving hostent     conversion. NOTE: this vulnerability exists because of     an incomplete fix for CVE-2013-4458.(CVE-2016-3706)

  - In glibc 2.26 and earlier there is confusion in the     usage of getcwd() by realpath() which can be used to     write before the destination buffer leading to a buffer     underflow and potential code     execution.(CVE-2018-1000001)

  - Stack-based buffer overflow in string/strcoll_l.c in     the GNU C Library (aka glibc or libc6) 2.17 and earlier     allows context-dependent attackers to cause a denial of     service (crash) or possibly execute arbitrary code via     a long string that triggers a malloc failure and use of     the alloca function.(CVE-2012-4424)

  - It was found that the dynamic loader did not sanitize     the LD_POINTER_GUARD environment variable. An attacker     could use this flaw to bypass the pointer guarding     protection on set-user-ID or set-group-ID programs to     execute arbitrary code with the permissions of the user     running the application.(CVE-2015-8777)

  - The glob function in glob.c in the GNU C Library (aka     glibc or libc6) before 2.27 contains a buffer overflow     during unescaping of user names with the ~     operator.(CVE-2017-15804)

  - res_query in libresolv in glibc before 2.25 allows     remote attackers to cause a denial of service (NULL     pointer dereference and process crash).(CVE-2015-5180)

  - pt_chown in GNU C Library (aka glibc or libc6) before     2.18 does not properly check permissions for tty files,     which allows local users to change the permission on     the files and obtain access to arbitrary     pseudo-terminals by leveraging a FUSE file     system.(CVE-2013-2207)

  - A stack overflow flaw was found in glibc's swscanf()     function. An attacker able to make an application call     the swscanf() function could use this flaw to crash     that application or, potentially, execute arbitrary     code with the permissions of the user running the     application.(CVE-2015-1473)

  - It was found that getaddrinfo() did not limit the     amount of stack memory used during name resolution. An     attacker able to make an application resolve an     attacker-controlled hostname or IP address could     possibly cause the application to exhaust all stack     memory and crash.(CVE-2013-4458)

  - A heap-based buffer overflow was found in glibc's
    __nss_hostname_digits_dots() function, which is used by     the gethostbyname() and gethostbyname2() glibc function     calls. A remote attacker able to make an application     call either of these functions could use this flaw to     execute arbitrary code with the permissions of the user     running the application.(CVE-2015-0235)

  - Multiple integer overflow flaws, leading to heap-based     buffer overflows, were found in glibc's memory     allocator functions (pvalloc, valloc, and memalign). If     an application used such a function, it could cause the     application to crash or, potentially, execute arbitrary     code with the privileges of the user running the     application.(CVE-2013-4332)

  - An integer overflow in the implementation of the     posix_memalign in memalign functions in the GNU C     Library (aka glibc or libc6) 2.26 and earlier could     cause these functions to return a pointer to a heap     area that is too small, potentially leading to heap     corruption.(CVE-2018-6485)

  - A stack based buffer overflow vulnerability was found     in the catopen() function. An excessively long string     passed to the function could cause it to crash or,     potentially, execute arbitrary code.(CVE-2015-8779)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glibc fixes the following issues: Security issues fixed :

  - CVE-2017-15804: Fix buffer overflow during unescaping of     user names in the glob function in glob.c (bsc#1064580).

  - CVE-2017-15670: Fix buffer overflow in glob with     GLOB_TILDE (bsc#1064583).

  - CVE-2017-15671: Fix memory leak in glob with GLOB_TILDE     (bsc#1064569).

  - CVE-2018-11236: Fix 32bit arch integer overflow in     stdlib/canonicalize.c when processing very long pathname     arguments (bsc#1094161).

  - CVE-2017-12132: Reduce advertised EDNS0 buffer size to     guard against fragmentation attacks (bsc#1051791).

  - CVE-2018-1000001: Avoid underflow of malloced area     (bsc#1074293).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3534-1 advisory.

    It was discovered that the GNU C library did not properly handle all of the possible return values from     the kernel getcwd(2) syscall. A local attacker could potentially exploit this to execute arbitrary code in     setuid programs and gain administrative privileges. (CVE-2018-1000001)

    A memory leak was discovered in the _dl_init_paths() function in the GNU C library dynamic loader. A local     attacker could potentially exploit this with a specially crafted value in the LD_HWCAP_MASK environment     variable, in combination with CVE-2017-1000409 and another vulnerability on a system with hardlink     protections disabled, in order to gain administrative privileges. (CVE-2017-1000408)

    A heap-based buffer overflow was discovered in the _dl_init_paths() function in the GNU C library dynamic     loader. A local attacker could potentially exploit this with a specially crafted value in the     LD_LIBRARY_PATH environment variable, in combination with CVE-2017-1000408 and another vulnerability on a     system with hardlink protections disabled, in order to gain administrative privileges. (CVE-2017-1000409)

    An off-by-one error leading to a heap-based buffer overflow was discovered in the GNU C library glob()     implementation. An attacker could potentially exploit this to cause a denial of service or execute     arbitrary code via a maliciously crafted pattern. (CVE-2017-15670)

    A heap-based buffer overflow was discovered during unescaping of user names with the ~ operator in the GNU     C library glob() implementation. An attacker could potentially exploit this to cause a denial of service     or execute arbitrary code via a maliciously crafted pattern. (CVE-2017-15804)

    It was discovered that the GNU C library dynamic loader mishandles RPATH and RUNPATH containing $ORIGIN     for privileged (setuid or AT_SECURE) programs. A local attacker could potentially exploit this by     providing a specially crafted library in the current working directory in order to gain administrative     privileges. (CVE-2017-16997)

    It was discovered that the GNU C library malloc() implementation could return a memory block that is too     small if an attempt is made to allocate an object whose size is close to SIZE_MAX, resulting in a heap-     based overflow. An attacker could potentially exploit this to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 17.10. (CVE-2017-17426)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has glibc packages installed that are affected by multiple vulnerabilities:

  - The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to     cause a denial of service (out-of-bounds read and crash) via 64 bytes of input. (CVE-2016-6261)

  - The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent     attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
    (CVE-2016-6263)

  - A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the     LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this     issue if patched for CVE-2017-1000366. (CVE-2017-1000408)

  - A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the     LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this     issue if patched for CVE-2017-1000366. (CVE-2017-1000409)

  - Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote     attackers to cause a denial of service or possibly have unspecified other impact. (CVE-2017-14062)

  - The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based     buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~     operator followed by a long string. (CVE-2017-15670)

  - The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer     overflow during unescaping of user names with the ~ operator. (CVE-2017-15804)

  - elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH     containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain     privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and     decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the     ./ directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very     uncommon; most likely, no such program is shipped with any common Linux distribution. (CVE-2017-16997)

  - The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too     small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to     a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code     path that lacks an integer overflow check. (CVE-2017-17426)

  - An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S     in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping     memory check if the source memory range spans the middle of the address space, resulting in corrupt data     being produced by the copy operation. This may disclose information to context-dependent attackers, or     result in a denial of service, or, possibly, code execution. (CVE-2017-18269)

  - In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to     write before the destination buffer leading to a buffer underflow and potential code execution.
    (CVE-2018-1000001)

  - stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very     long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit     architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
    (CVE-2018-11236)

  - An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27     and earlier may write data beyond the target buffer, leading to a buffer overflow in
    __mempcpy_avx512_no_vzeroupper. (CVE-2018-11237)

  - In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via     getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the     if_nametoindex() function. (CVE-2018-19591)

  - In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-     based buffer over-read via an attempted case-insensitive regular-expression match. (CVE-2019-9169)

  - The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range     reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when     passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. (CVE-2020-10029)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for glibc is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es) :

* glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation (CVE-2018-1000001)

* glibc: Buffer overflow in glob with GLOB_TILDE (CVE-2017-15670)

* glibc: Buffer overflow during unescaping of user names with the ~ operator (CVE-2017-15804)

* glibc: denial of service in getnetbyname function (CVE-2014-9402)

* glibc: DNS resolver NULL pointer dereference with crafted record type (CVE-2015-5180)

* glibc: Fragmentation attacks possible when EDNS0 is enabled (CVE-2017-12132)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank halfdog for reporting CVE-2018-1000001.
The CVE-2015-5180 issue was discovered by Florian Weimer (Red Hat Product Security).

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary     libraries (CVE-2017-16997)

  - glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-     read (CVE-2019-9169)

  - In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses     alternatives, which allows attackers to cause a denial of service (assertion failure and application exit)     or trigger an incorrect result by attempting a regular-expression match. (CVE-2009-5155)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名稱	產品	系列	已發布	已更新	嚴重性
106775	EulerOS 2.0 SP1 : glibc (EulerOS-SA-2018-1047)	Nessus	Huawei Local Security Checks	2018/2/13	2021/1/6	high
106776	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2018-1048)	Nessus	Huawei Local Security Checks	2018/2/13	2021/1/6	high
108822	GLSA-201804-02 : glibc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/4/4	2019/4/5	critical
117548	EulerOS Virtualization 2.5.0 : glibc (EulerOS-SA-2018-1239)	Nessus	Huawei Local Security Checks	2018/9/18	2024/8/7	high
106044	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2018:0074-1)	Nessus	SuSE Local Security Checks	2018/1/15	2021/1/13	critical
107086	SUSE SLES11 Security Update : glibc (SUSE-SU-2018:0565-1)	Nessus	SuSE Local Security Checks	2018/3/1	2021/1/19	critical
183587	Ubuntu 16.04 ESM : musl vulnerabilities (USN-4768-1)	Nessus	Ubuntu Local Security Checks	2023/10/20	2024/8/27	critical
127183	NewStart CGSL CORE 5.04 / MAIN 5.04 : glibc Multiple Vulnerabilities (NS-SA-2019-0024)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
109699	Amazon Linux AMI：glibc (ALAS-2018-1017)	Nessus	Amazon Linux Local Security Checks	2018/5/11	2024/10/9	critical
109447	Scientific Linux 安全性更新：SL7.x x86_64 上的 glibc	Nessus	Scientific Linux Local Security Checks	2018/5/1	2024/10/16	critical
106045	SUSE SLES11 Security Update : glibc (SUSE-SU-2018:0075-1)	Nessus	SuSE Local Security Checks	2018/1/15	2021/1/19	high
125004	EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1551)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	critical
111547	SUSE SLES12 Security Update : glibc (SUSE-SU-2018:2187-1)	Nessus	SuSE Local Security Checks	2018/8/6	2024/8/26	critical
106134	Ubuntu 14.04 LTS / 16.04 LTS : GNU C Library vulnerabilities (USN-3534-1)	Nessus	Ubuntu Local Security Checks	2018/1/18	2024/8/27	critical
147282	NewStart CGSL MAIN 6.02 : glibc Multiple Vulnerabilities (NS-SA-2021-0053)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2022/5/10	critical
109371	CentOS 7 : glibc (CESA-2018:0805)	Nessus	CentOS Local Security Checks	2018/4/27	2019/12/31	critical
199103	RHEL 6 : glibc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/10/17	critical

偵測

搜尋 Plugin

high

high

critical

high

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

critical

critical

critical