According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0     through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress.
    Instead, default permissions are used.(CVE-2019-12450)

  - The keyfile settings backend in GNOME GLib (aka     glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL,     NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE,     G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory     (and file) permissions. Instead, for directories, 0777     permissions are used for files, default file     permissions are used. This is similar to     CVE-2019-12450.(CVE-2019-13012)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The keyfile settings backend in GNOME GLib (aka     glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL,     NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE,     G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory     (and file) permissions. Instead, for directories, 0777     permissions are used for files, default file     permissions are used. This is similar to     CVE-2019-12450.(CVE-2019-13012)

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0     through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress.
    Instead, default permissions are used.(CVE-2019-12450)

  - GNOME GLib 2.56.1 has an out-of-bounds read     vulnerability in g_markup_parse_context_parse() in     gmarkup.c, related to utf8_str().(CVE-2018-16429)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0     through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress.
    Instead, default permissions are used.(CVE-2019-12450)

  - The keyfile settings backend in GNOME GLib (aka     glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb-i1/4zdir, NULL,     NULL) and files using g_file_replace_contents     (kfsb-i1/4zfile, contents, length, NULL, FALSE,     G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory     (and file) permissions. Instead, for directories, 0777     permissions are used for files, default file     permissions are used.(CVE-2019-13012)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1586 advisory.

    - Fix CVE-2019-13012       Resolves: #1728632

    glibmm24

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has glib2 packages installed that are affected by multiple vulnerabilities:

  - The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories,     0777 permissions are used; for files, default file permissions are used. This is similar to     CVE-2019-12450. (CVE-2019-13012)

  - An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has     an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow     could potentially lead to memory corruption. (CVE-2021-27219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for glib2 fixes the following issues :

Security issue fixed :

CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for glib2 fixes the following issues :

Security issue fixed :

CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).

Non-security issue fixed: Added explicit requires between libglib2 and libgio2 (bsc#1140122).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the glib package has been released.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0055 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-13012:
    The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories,     0777 permissions are used; for files, default file permissions are used. This is similar to     CVE-2019-12450.

    CVE-2021-27218:
    An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take()     was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32,     causing unintended length truncation.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using     g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents     (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL).
    Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories,     0777 permissions are used; for files, default file permissions are used. This is similar to     CVE-2019-12450. (CVE-2019-13012)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
135516	EulerOS 2.0 SP3 : glib2 (EulerOS-SA-2020-1387)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	critical
135618	EulerOS Virtualization 3.0.2.2 : glib2 (EulerOS-SA-2020-1456)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	critical
129436	EulerOS 2.0 SP8 : glib2 (EulerOS-SA-2019-2077)	Nessus	Huawei Local Security Checks	2019/9/30	2024/4/22	critical
149947	Oracle Linux 8 : GNOME (ELSA-2021-1586)	Nessus	Oracle Linux Local Security Checks	2021/5/26	2024/11/1	high
160863	NewStart CGSL MAIN 6.02 : glib2 Multiple Vulnerabilities (NS-SA-2022-0053)	Nessus	NewStart CGSL Local Security Checks	2022/5/10	2023/10/30	high
126689	SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1824-1)	Nessus	SuSE Local Security Checks	2019/7/15	2024/5/10	high
126692	SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1830-1)	Nessus	SuSE Local Security Checks	2019/7/15	2024/5/10	high
126694	SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2019:1833-1)	Nessus	SuSE Local Security Checks	2019/7/15	2024/5/9	high
128152	Photon OS 3.0: Glib PHSA-2019-3.0-0024	Nessus	PhotonOS Local Security Checks	2019/8/26	2025/8/22	high
236432	Alibaba Cloud Linux 3 : 0055: glib2 (ALINUX3-SA-2021:0055)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
222513	Linux Distros Unpatched Vulnerability : CVE-2019-13012	Nessus	Misc.	2025/3/4	2026/8/1	high

检测

插件搜索

critical

critical

critical

high

high

high

high

high

high

high

high