According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 6.2.0 までの Onigmo では、regenc.c にコードポイント検証がないため、parse_char_class で領域外読み取りが発生します。 （CVE-2019-16162）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Onigmo 到 6.2.0 在 parse_char_class 中存在越界读取，因为在 regenc.c 中缺少代码点验证。 (CVE-2019-16162)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 至 6.2.0 之前的 Onigmo 中，parse_char_class 中有超出邊界讀取情形，這是因為 regenc.c 中缺少程式碼點驗證所致。 (CVE-2019-16162)

請注意，Nessus 依賴供應商報告的套件存在。

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A NULL pointer dereference vulnerability was found in     Onigmo in the way it handled certain types of 'subexp'     regular expressions. A remote attacker could exploit     this flaw by providing a malformed regular expression     that when processed by an application linked to Onigmo,     would crash the application, causing a denial of     service.(CVE-2019-16161)

  - An out-of-bounds read vulnerability was found in Onigmo     in the way it handled wide characters in regular     expressions. A remote attacker could exploit this flaw     by providing a malformed regular expression that when     processed by an application linked to Onigmo, would     crash the application and cause a denial of     service.(CVE-2019-16162)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation     in regenc.c. (CVE-2019-16162)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
142258	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2020-2439)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
222484	Linux Distros のパッチ未適用の脆弱性: CVE-2019-16162	Nessus	Misc.	2025/3/4	2025/3/4	high
222484	Linux Distros 未修补的漏洞: CVE-2019-16162	Nessus	Misc.	2025/3/4	2025/3/4	high
222484	Linux Distros 未修補弱點：CVE-2019-16162	Nessus	Misc.	2025/3/4	2025/3/4	high
146730	EulerOS 2.0 SP2 : ruby (EulerOS-SA-2021-1356)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	high
147536	EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2021-1387)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	high
145133	EulerOS 2.0 SP3 : ruby (EulerOS-SA-2021-1117)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	high
222484	Linux Distros Unpatched Vulnerability : CVE-2019-16162	Nessus	Misc.	2025/3/4	2025/3/4	high
144261	EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-2564)	Nessus	Huawei Local Security Checks	2020/12/15	2024/2/1	high
147083	EulerOS Virtualization for ARM 64 3.0.6.0 : ruby (EulerOS-SA-2021-1540)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	high
142270	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2020-2421)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
144156	EulerOS 2.0 SP8 : ruby (EulerOS-SA-2020-2532)	Nessus	Huawei Local Security Checks	2020/12/14	2024/2/2	high
151390	EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2021-2167)	Nessus	Huawei Local Security Checks	2021/7/6	2023/12/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high