Security Fix(es) :

  - glibc: realpath() buffer underflow when getcwd() returns     relative path allows privilege escalation     (CVE-2018-1000001)

  - glibc: Buffer overflow in glob with GLOB_TILDE     (CVE-2017-15670)

  - glibc: Buffer overflow during unescaping of user names     with the ~ operator (CVE-2017-15804)

  - glibc: denial of service in getnetbyname function     (CVE-2014-9402)

  - glibc: DNS resolver NULL pointer dereference with     crafted record type (CVE-2015-5180)

  - glibc: Fragmentation attacks possible when EDNS0 is     enabled (CVE-2017-12132)

Additional Changes :

Fragmentation attacks possible when EDNS0 is enabled

The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.(CVE-2017-12132)

Buffer overflow in glob with GLOB_TILDE

The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.(CVE-2017-15670)

Denial of service in getnetbyname function

The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.(CVE-2014-9402)

DNS resolver NULL pointer dereference with crafted record type

res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).(CVE-2015-5180)

realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.(CVE-2018-1000001)

Buffer overflow during unescaping of user names with the ~ operator

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.(CVE-2017-15804)

The remote host is affected by the vulnerability described in GLSA-201706-19 (GNU C Library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the GNU C Library.
      Please review the CVE identifiers and Qualys&rsquo; security advisory       referenced below for details.
  Impact :

    An attacker could possibly execute arbitrary code with the privileges of       the process, escalate privileges or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Stack-based buffer overflow in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) allows remote servers to cause a denial     of service (crash) or possibly unspecified other impact     via a flood of crafted ICMP and UDP     packets.(CVE-2016-4429)

  - Integer overflow in the strxfrm function in the GNU C     Library (aka glibc or libc6) before 2.21 allows     context-dependent attackers to cause a denial of     service (crash) or possibly execute arbitrary code via     a long string, which triggers a stack-based buffer     overflow.(CVE-2015-8982)

  - The posix_spawn_file_actions_addopen function in glibc     before 2.20 does not copy its path argument in     accordance with the POSIX specification, which allows     context-dependent attackers to trigger use-after-free     vulnerabilities.(CVE-2014-4043)

  - res_query in libresolv in glibc before 2.25 allows     remote attackers to cause a denial of service (NULL     pointer dereference and process crash).(CVE-2015-5180)

  - A buffer overflow has been discovered in the GNU C     Library (aka glibc or libc6) in the
    __mempcpy_avx512_no_vzeroupper function when particular     conditions are met. An attacker could use this     vulnerability to cause a denial of service or     potentially execute code.(CVE-2018-11237)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     proceed_next_node in posix/regexec.c has a heap-based     buffer over-read via an attempted case-insensitive     regular-expression match.(CVE-2019-9169)

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

  - The DNS stub resolver in the GNU C Library (aka glibc     or libc6) before version 2.26, when EDNS support is     enabled, will solicit large UDP responses from name     servers, potentially simplifying off-path DNS spoofing     attacks due to IP fragmentation.(CVE-2017-12132)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL     pointer dereference and process crash). (CVE-2015-5180)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update addresses various minor issues in the glibc package :

  - The DNS stub resolver now picks up changes to     `/etc/resolv.conf` automatically (RHBZ#1374239).

  - The DNS stub resolver supports an unlimited number of     search domains (RHBZ#168253).

  - CVE-2015-5180, a segmentation fault potentially     affecting applications which use the DNS stub resolver     in an unusual way, has been fixed (RHBZ#1251403).

  - `/var/db/Makefile` is now shipped in the `nss_db`     package (RHBZ#1498900).

  - The IBM858 character set is now supported     (RHBZ#1416405).

  - The `compat` NSS service module is again part of the     main glibc package (RHBZ#1400538).

  - A pointer alignment/endianess issue was fixed in the NSS     group merging implementation (RHBZ#1471985).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of [curl,glibc,postgresql] packages of photonOS has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
109447	Scientific Linux Security Update : glibc on SL7.x x86_64 (20180410)	Nessus	Scientific Linux Local Security Checks	2018/5/1	2024/10/16	critical
109699	Amazon Linux AMI : glibc (ALAS-2018-1017)	Nessus	Amazon Linux Local Security Checks	2018/5/11	2024/10/9	critical
100945	GLSA-201706-19 : GNU C Library: Multiple vulnerabilities (Stack Clash)	Nessus	Gentoo Local Security Checks	2017/6/21	2021/1/11	high
129223	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2019-2030)	Nessus	Huawei Local Security Checks	2019/9/24	2021/1/6	critical
218790	Linux Distros Unpatched Vulnerability : CVE-2015-5180	Nessus	Misc.	2025/3/4	2025/9/4	high
104150	Fedora 26 : glibc (2017-2c63df4fe3)	Nessus	Fedora Local Security Checks	2017/10/26	2021/1/11	high
111897	Photon OS 1.0: Curl / Glibc PHSA-2017-0048 (deprecated)	Nessus	PhotonOS Local Security Checks	2018/8/17	2019/2/7	medium

检测

插件搜索

critical

critical

high

critical

high

high

medium