运行版本 CORE 5.04 / MAIN 5.04 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 glibc 程序包：- 在 GNU C 库（亦即 glibc 或 libc6）2.26 和更旧版本的 memalign 函数中，实现 posix_memalign 时发生的整数溢出可造成这些函数返回过小的堆区域的指针，进而可能导致堆损坏。(CVE-2018-6485) - GNU C 库 (亦即 glibc 或 libc6) 2.19 到 2.26 中的 elf/dl-load.c 未针对具权限的 (setuid 或 AT_SECURE) 程序正确处理含有 $ORIGIN 的 RPATH 和 RUNPATH，进而允许本地用户通过当前工作目录中的特洛伊木马库获得权限，这与 fillin_rpath 和 decompose_rpath 函数有关。这与将空 RPATH/RUNPATH 令牌误解译为 ./ 目录有关。请注意：针对具权限程序的此 RPATH/RUNPATH 配置显然非常罕见；很可能是，任何常见的 Linux 发行版本都没有随附此类程序。(CVE-2017-16997) - 符合特定条件时，在 GNU C 库 (亦即 glibc 或 libc6) 的 __mempcpy_avx512_no_vzeroupper 函数中发现缓冲区溢出。攻击者可利用此漏洞造成拒绝服务或可能执行代码。(CVE-2018-11237) - 2.27 或更早版本 GNU C 库（亦称为 glibc 或 libc6）中的 stdlib/canonicalize.c，在处理 realpath 函数的过长路径名参数时，可能在 32 位架构上遭遇整数溢出，导致基于堆栈的缓冲区溢出并可能导致执行任意代码。(CVE-2018-11236) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

根据安装的 glibc 程序包版本，远程主机上安装的 EulerOS Virtualization 会受到下列漏洞影响：- 在 GNU C 库（亦即 glibc 或 libc6）2.26 和更旧版本的 memalign 函数中，实现 posix_memalign 时发生的整数溢出可造成这些函数返回指向过小堆区的指针，进而可能导致堆损坏。(CVE-2018-6485) 请注意，Tenable Network Security 已直接从 EulerOS 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

远程 Oracle Linux 7 主机上安装的多个程序包受到 ELSA-2018-3092 公告中提及的多个漏洞影响。

  - GNU C 库（又称为 glibc 或 libc6）2.19 - 2.26 中的 elf/dl-load.c 未正确处理具有权限的（setuid 或 AT_SECURE）程序含有 $ORIGIN 的 RPATH 和 RUNPATH，本地用户可利用此漏洞，通过当前工作目录中的特洛伊木马库获取权限，这与 fillin_rpath 和 decompose_rpath 函数相关。这与将空 RPATH/RUNPATH 令牌误解译为 ./ 目录有关。注意：针对具权限程序的此 RPATH/RUNPATH 配置显然非常罕见；很可能是，任何常见的 Linux 发行版本都没有随附此类程序。(CVE-2017-16997)

  - 在 GNU C 库（亦即 glibc 或 libc6）2.26 和更早版本的 memalign 函数中，实现 posix_memalign 时发生的整数溢出可造成这些函数返回过小的堆区域的指针，进而可能导致堆损坏。(CVE-2018-6485)

  - 在 GNU C 库（又称为 glibc 或 libc6）2.27 及较早版本的 stdlib/canonicalize.c 中，处理 realpath 函数过长的路径名参数时，可能会在 32 位架构上遭遇整数溢出，导致基于堆栈的缓冲区溢出，并可能执行任意代码。
    (CVE-2018-11236)

  - 在 GNU C 库（又称为 glibc 或 libc6）2.27 及较早版本中，mempcpy 函数的 AVX-512 优化实现可能在目标缓冲区之外写入数据，
    __mempcpy_avx512_no_vzeroupper。(CVE-2018-11237)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An integer overflow in the implementation of the     posix_memalign in memalign functions in the GNU C     Library (aka glibc or libc6) 2.26 and earlier could     cause these functions to return a pointer to a heap     area that is too small, potentially leading to heap     corruption.(CVE-2018-6485)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - An integer overflow in the implementation of the     posix_memalign in memalign functions in the GNU C     Library (aka glibc or libc6) 2.26 and earlier could     cause these functions to return a pointer to a heap     area that is too small, potentially leading to heap     corruption.i1/4^CVE-2018-6485i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - glibc: Incorrect handling of RPATH in elf/dl-load.c can     be used to execute code loaded from arbitrary libraries     (CVE-2017-16997)

  - glibc: Integer overflow in posix_memalign in memalign     functions (CVE-2018-6485)

  - glibc: Integer overflow in stdlib/canonicalize.c on     32-bit architectures leading to stack-based buffer     overflow (CVE-2018-11236)

  - glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper     (CVE-2018-11237)

A buffer overflow has been discovered in the GNU C Library (aka glibc or libc6) in the __mempcpy_avx512_no_vzeroupper function when particular conditions are met. An attacker could use this vulnerability to cause a denial of service or potentially execute code.(CVE-2018-11237)

elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions.
This is associated with misinterpretion of an empty RPATH/RUNPATH token as the './' directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.(CVE-2017-16997)

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.(CVE-2018-11236)

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.(CVE-2018-6485)

An update of the glibc package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
127214	NewStart CGSL CORE 5.04 / MAIN 5.04：glibc 多个漏洞 (NS-SA-2019-0040)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2022/5/19	critical
123911	EulerOS Virtualization 2.5.4：glibc (EulerOS-SA-2019-1225)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	critical
180807	Oracle Linux 7：glibc (ELSA-2018-3092)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical
122172	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2019-1025)	Nessus	Huawei Local Security Checks	2019/2/14	2024/6/20	critical
122377	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2019-1050)	Nessus	Huawei Local Security Checks	2019/2/22	2024/6/18	critical
123768	EulerOS Virtualization 2.5.3 : glibc (EulerOS-SA-2019-1228)	Nessus	Huawei Local Security Checks	2019/4/5	2024/6/5	critical
119182	Scientific Linux Security Update : glibc on SL7.x x86_64 (20181030)	Nessus	Scientific Linux Local Security Checks	2018/11/27	2024/7/18	critical
119468	Amazon Linux AMI : glibc (ALAS-2018-1109)	Nessus	Amazon Linux Local Security Checks	2018/12/7	2024/7/17	critical
121812	Photon OS 1.0: Glibc PHSA-2018-1.0-0111	Nessus	PhotonOS Local Security Checks	2019/2/7	2019/4/2	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical