According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - runuser in util-linux allows local users to escape to     the parent session via a crafted TIOCSTI ioctl call,     which pushes characters to the terminal's input     buffer.(CVE-2016-2779)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - util-linux 中的 runuser 允許本機使用者透過特製的 TIOCSTI ioctl 呼叫 (將字元推送至終端機的輸入緩衝區)，逸出至父項工作階段。 (CVE-2016-2779)

請注意，Nessus 依賴供應商報告的套件存在。

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - runuser in util-linux allows local users to escape to     the parent session via a crafted TIOCSTI ioctl call,     which pushes characters to the terminal's input     buffer.(CVE-2016-2779)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - util-linux 中的 runuser 允许本地用户通过构建的 TIOCSTI ioctl 调用逃逸至父会话，该调用将字符推送到终端的输入缓冲区。 (CVE-2016-2779)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - util-linux における runuser により、ローカルユーザーが、細工された TIOCSTI ioctl 呼び出しにより親セッションにエスケープすることが可能です。これにより、端末の入力バッファに文字がプッシュされます。 （CVE-2016-2779）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the version of the util-linux packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - It was found that runuser was vulnerable to TIOCSTI     ioctl attacks, allowing the executed program to push     characters to its TTY's input buffer. While being     executed as a non-privileged user, a specially crafted     program could force its parent TTY to enter commands,     interpreted by the shell when runuser     exits.(CVE-2016-2779)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call,     which pushes characters to the terminal's input buffer. (CVE-2016-2779)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
151403	EulerOS Virtualization 3.0.2.2 : util-linux (EulerOS-SA-2021-2173)	Nessus	Huawei Local Security Checks	2021/7/6	2023/12/8	high
219364	Linux Distros 未修補弱點：CVE-2016-2779	Nessus	Misc.	2025/3/4	2025/8/24	high
137462	EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2020-1620)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/7	high
145136	EulerOS 2.0 SP3 : util-linux (EulerOS-SA-2021-1128)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	high
147066	EulerOS Virtualization 3.0.6.6 : util-linux (EulerOS-SA-2021-1524)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	high
219364	Linux Distros 未修补的漏洞: CVE-2016-2779	Nessus	Misc.	2025/3/4	2025/8/24	high
219364	Linux Distros のパッチ未適用の脆弱性: CVE-2016-2779	Nessus	Misc.	2025/3/4	2025/8/24	high
151344	EulerOS Virtualization for ARM 64 3.0.2.0 : util-linux (EulerOS-SA-2021-2070)	Nessus	Huawei Local Security Checks	2021/7/2	2023/12/11	high
144242	EulerOS 2.0 SP5 : util-linux (EulerOS-SA-2020-2568)	Nessus	Huawei Local Security Checks	2020/12/15	2024/2/1	high
219364	Linux Distros Unpatched Vulnerability : CVE-2016-2779	Nessus	Misc.	2025/3/4	2025/8/24	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high