According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A security flaw was found in the Linux kernel in     drivers/tty/n_tty.c which allows local attackers (ones     who are able to access pseudo terminals) to lock them     up and block further usage of any pseudo terminal     devices due to an EXTPROC versus ICANON confusion in     TIOCINQ handler.i1/4^CVE-2018-18386i1/4%0

  - The Linux kernel was found vulnerable to an integer     overflow in the     drivers/video/fbdev/uvesafb.c:uvesafb_setcmap()     function. The vulnerability could result in local     attackers being able to crash the kernel or potentially     elevate privileges.i1/4^CVE-2018-13406i1/4%0

  - The vsock_stream_sendmsg function in     net/vmw_vsock/af_vsock.c in the Linux kernel before     3.9-rc7 does not initialize a certain length variable,     which allows local users to obtain sensitive     information from kernel stack memory via a crafted     recvmsg or recvfrom system call.i1/4^CVE-2013-3237i1/4%0

  - The llc_ui_recvmsg function in net/llc/af_llc.c in the     Linux kernel before 3.9-rc7 does not initialize a     certain length variable, which allows local users to     obtain sensitive information from kernel stack memory     via a crafted recvmsg or recvfrom system     call.i1/4^CVE-2013-3231i1/4%0

  - The crypto API in the Linux kernel through 3.9-rc8 does     not initialize certain length variables, which allows     local users to obtain sensitive information from kernel     stack memory via a crafted recvmsg or recvfrom system     call, related to the hash_recvmsg function in     crypto/algif_hash.c and the skcipher_recvmsg function     in crypto/algif_skcipher.c.i1/4^CVE-2013-3076i1/4%0

  - Integer overflow in the snd_compr_allocate_buffer     function in sound/core/compress_offload.c in the ALSA     subsystem in the Linux kernel before     3.6-rc6-next-20120917 allows local users to cause a     denial of service (insufficient memory allocation) or     possibly have unspecified other impact via a crafted     SNDRV_COMPRESS_SET_PARAMS ioctl     call.i1/4^CVE-2012-6703i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

根据安装的内核程序包版本，远程主机上安装的 EulerOS Virtualization 会受到下列漏洞影响：- 在 Linux 内核的 drivers/tty/n_tty.c 中发现一个安全缺陷，允许本地攻击者（有能力访问 pseudo 终端者）将其锁定，并封锁任何 pseudo 终端设备的进一步使用，这是因为 TIOCINQ 处理程序中存在 EXTPROC 与 ICANON 之间的混淆所导致。(CVE-2018-18386) - 据发现，Linux 内核的 drivers/video/fbdev/uvesafb.c:uvesafb_setcmap() 函数容易发生整数溢出。本地攻击者可借此漏洞致使内核崩溃，甚或提升权限。(CVE-2018-13406) - 在 3.9-rc7 之前的 Linux 内核中，net/vmw_vsock/af_vsock.c 中的 vsock_stream_sendmsg 函数并未初始化特定的长度变量，本地用户可借此通过特制的 recvmsg 或 recvfrom 系统调用从内核堆栈内存获取敏感信息。(CVE-2013-3237) - 在 3.9-rc7 之前的 Linux 内核中，net/llc/af_llc.c 中的 llc_ui_recvmsg 函数并未初始化特定的长度变量，本地用户可借此通过特制的 recvmsg 或 recvfrom 系统调用从内核堆栈内存获取敏感信息。(CVE-2013-3231) - 在 3.9-rc8 之前的 Linux 内核中，crypto API 并未初始化特定的长度变量，本地用户可借此通过特制的 recvmsg 或 recvfrom 系统调用从内核堆栈内存获取敏感信息（与 crypto/algif_hash.c 中的 hash_recvmsg 函数及 crypto/algif_skcipher.c 中的 skcipher_recvmsg 函数相关）。(CVE-2013-3076) - 在 3.6-rc6-next-20120917 之前的 Linux 内核中，ALSA 子系统的 sound/core/compress_offload.c 的 snd_compr_allocate_buffer 函数中有整数溢位情形，本地用户可借此通过特制的 SNDRV_COMPRESS_SET_PARAMS ioctl 调用造成拒绝服务（内存配置不足），甚至可能造成不明的其他影响。(CVE-2012-6703) 请注意，Tenable Network Security 已直接从 EulerOS 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

ID	名稱	產品	系列	已發布	已更新	嚴重性
123890	EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1204)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	high
123883	EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1197)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	high
123890	EulerOS Virtualization 2.5.4：内核 (EulerOS-SA-2019-1204)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	high
123883	EulerOS Virtualization 2.5.3：内核 (EulerOS-SA-2019-1197)	Nessus	Huawei Local Security Checks	2019/4/9	2024/6/4	high

偵測

搜尋 Plugin

high

high

high

high