The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4444 advisory.

  - glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions (CVE-2020-10029)

  - glibc: array overflow in backtrace functions for powerpc (CVE-2020-1751)

  - glibc: use-after-free in glob() function when expanding ~user (CVE-2020-1752)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update incorporates fixes from the upstream glibc 2.30 stable release branch, including 3 fixes for medium severity security vulnerabilities. (CVE-2020-10029, CVE-2020-1752, CVE-2020-1751)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K49921213 advisory.

  - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32. (CVE-2020-1752)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has glibc packages installed that are affected by multiple vulnerabilities:

  - An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on     PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the     frame address, resulting in a denial of service or potential code execution. The highest threat from this     vulnerability is to system availability. (CVE-2020-1751)

  - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32. (CVE-2020-1752)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0122 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2019-19126:
    On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition,     allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass     ASLR for a setuid program.

    CVE-2020-10029:
    The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range     reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when     passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

    CVE-2020-1751:
    An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on     PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the     frame address, resulting in a denial of service or potential code execution. The highest threat from this     vulnerability is to system availability.

    CVE-2020-1752:
    A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32.

    CVE-2020-6096:
    An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc     2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative     value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the     'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-     of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows     for program execution to continue in scenarios where a segmentation fault or crash should have occurred.
    The dangers occur in that subsequent execution and iterations of this code will be executed with this     corrupted data.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for glibc fixes the following issues :

CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution (bsc#1167631).

CVE-2020-1751: Fixed an array overflow in backtrace for PowerPC (bsc#1158996).

CVE-2020-10029: Fixed a stack-based buffer overflow during range reduction (bsc#1165784).

Use 'posix_spawn' on popen preventing crash caused by 'subprocess'.
(bsc#1149332, BZ #22834)

Fix handling of needles crossing a page, preventing incorrect results to return during the cross page boundary search. (bsc#1157893, BZ #25226)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3152 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3152-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Helmut Grohne     October 17, 2022                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : glibc     Version        : 2.28-10+deb10u2     CVE ID         : CVE-2016-10228 CVE-2019-19126 CVE-2019-25013                      CVE-2020-1752 CVE-2020-6096 CVE-2020-10029                      CVE-2020-27618 CVE-2021-3326 CVE-2021-3999                      CVE-2021-27645 CVE-2021-33574 CVE-2021-35942                      CVE-2022-23218 CVE-2022-23219     Debian Bug     : 856503 945250 953108 953788 961452 973914 979273 981198                      983479 989147 990542

    This update fixes a wide range of vulnerabilities. A significant portion     affects character set conversion.

    CVE-2016-10228

        The iconv program in the GNU C Library when invoked with multiple         suffixes in the destination encoding (TRANSLATE or IGNORE) along with         the -c option, enters an infinite loop when processing invalid         multi-byte input sequences, leading to a denial of service.

    CVE-2019-19126

        On the x86-64 architecture, the GNU C Library fails to ignore the         LD_PREFER_MAP_32BIT_EXEC environment variable during program         execution after a security transition, allowing local attackers to         restrict the possible mapping addresses for loaded libraries and         thus bypass ASLR for a setuid program.

    CVE-2019-25013

        The iconv feature in the GNU C Library, when processing invalid         multi-byte input sequences in the EUC-KR encoding, may have a buffer         over-read.

    CVE-2020-10029

        The GNU C Library could overflow an on-stack buffer during range         reduction if an input to an 80-bit long double function contains a         non-canonical bit pattern, a seen when passing a         0x5d414141414141410000 value to sinl on x86 targets. This is related         to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

    CVE-2020-1752

        A use-after-free vulnerability introduced in glibc was found in the         way the tilde expansion was carried out. Directory paths containing         an initial tilde followed by a valid username were affected by this         issue. A local attacker could exploit this flaw by creating a         specially crafted path that, when processed by the glob function,         would potentially lead to arbitrary code execution.

    CVE-2020-27618

        The iconv function in the GNU C Library, when processing invalid         multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390,         and IBM1399 encodings, fails to advance the input state, which could         lead to an infinite loop in applications, resulting in a denial of         service, a different vulnerability from CVE-2016-10228.

    CVE-2020-6096

        An exploitable signed comparison vulnerability exists in the ARMv7         memcpy() implementation of GNU glibc. Calling memcpy() (on ARMv7         targets that utilize the GNU glibc implementation) with a negative         value for the 'num' parameter results in a signed comparison         vulnerability. If an attacker underflows the 'num' parameter to         memcpy(), this vulnerability could lead to undefined behavior such as         writing to out-of-bounds memory and potentially remote code         execution.  Furthermore, this memcpy() implementation allows for         program execution to continue in scenarios where a segmentation fault         or crash should have occurred. The dangers occur in that subsequent         execution and iterations of this code will be executed with this         corrupted data.

    CVE-2021-27645

        The nameserver caching daemon (nscd) in the GNU C Library, when         processing a request for netgroup lookup, may crash due to a         double-free, potentially resulting in degraded service or Denial of         Service on the local system. This is related to netgroupcache.c.

    CVE-2021-3326

        The iconv function in the GNU C Library, when processing invalid         input sequences in the ISO-2022-JP-3 encoding, fails an assertion in         the code path and aborts the program, potentially resulting in a         denial of service.

    CVE-2021-33574

        The mq_notify function in the GNU C Library has a use-after-free. It         may use the notification thread attributes object (passed through         its struct sigevent parameter) after it has been freed by the caller,         leading to a denial of service (application crash) or possibly         unspecified other impact.

    CVE-2021-35942

        The wordexp function in the GNU C Library may crash or read arbitrary         memory in parse_param (in posix/wordexp.c) when called with an         untrusted, crafted pattern, potentially resulting in a denial of         service or disclosure of information. This occurs because atoi was         used but strtoul should have been used to ensure correct calculations.

    CVE-2021-3999

        An off-by-one buffer overflow and underflow in getcwd() may lead to         memory corruption when the size of the buffer is exactly 1. A local         attacker who can control the input buffer and size passed to getcwd()         in a setuid program could use this flaw to potentially execute         arbitrary code and escalate their privileges on the system.

    CVE-2022-23218

        The deprecated compatibility function svcunix_create in the sunrpc         module of the GNU C Library copies its path argument on the stack         without validating its length, which may result in a buffer overflow,         potentially resulting in a denial of service or (if an application         is not built with a stack protector enabled) arbitrary code execution.

    CVE-2022-23219

        The deprecated compatibility function clnt_create in the sunrpc module         of the GNU C Library copies its hostname argument on the stack without         validating its length, which may result in a buffer overflow,         potentially resulting in a denial of service or (if an application is         not built with a stack protector enabled) arbitrary code execution.


    For Debian 10 buster, these problems have been fixed in version     2.28-10+deb10u2.

    We recommend that you upgrade your glibc packages.

    For the detailed security status of glibc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/glibc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4416-1 advisory.

    Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote     attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-12133)

    It was discovered that the GNU C Library incorrectly handled certain SSE2-optimized memmove operations. A     remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of     service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-18269)

    It was discovered that the GNU C Library incorrectly handled certain pathname operations. A remote     attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-11236)

    It was discovered that the GNU C Library incorrectly handled certain AVX-512-optimized mempcpy operations.
    A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of     service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-11237)

    It was discovered that the GNU C Library incorrectly handled certain hostname loookups. A remote attacker     could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly     execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-19591)

    Jakub Wilk discovered that the GNU C Library incorrectly handled certain memalign functions. A remote     attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-6485)

    It was discovered that the GNU C Library incorrectly ignored the LD_PREFER_MAP_32BIT_EXEC environment     variable after security transitions. A local attacker could use this issue to bypass ASLR restrictions.
    (CVE-2019-19126)

    It was discovered that the GNU C Library incorrectly handled certain regular expressions. A remote     attacker could possibly use this issue to cause the GNU C Library to crash, resulting in a denial of     service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9169)

    It was discovered that the GNU C Library incorrectly handled certain bit patterns. A remote attacker could     use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute     arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-10029)

    It was discovered that the GNU C Library incorrectly handled certain signal trampolines on PowerPC. A     remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of     service, or possibly execute arbitrary code. (CVE-2020-1751)

    It was discovered that the GNU C Library incorrectly handled tilde expansion. A remote attacker could use     this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2020-1752)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0122 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-19126:
    On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition,     allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass     ASLR for a setuid program.

    CVE-2020-10029:
    The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range     reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when     passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

    CVE-2020-1751:
    An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on     PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the     frame address, resulting in a denial of service or potential code execution. The highest threat from this     vulnerability is to system availability.

    CVE-2020-1752:
    A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32.

    CVE-2020-6096:
    An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc     2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative     value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the     'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-     of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows     for program execution to continue in scenarios where a segmentation fault or crash should have occurred.
    The dangers occur in that subsequent execution and iterations of this code will be executed with this     corrupted data.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32. (CVE-2020-1752)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the glibc package has been released.

This update incorporates fixes from the upstream glibc 2.29 stable release branch, including 3 fixes for medium severity security vulnerabilities. (CVE-2020-10029, CVE-2020-1752, CVE-2020-1751)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The GNU C Library (aka glibc or libc6) before 2.32     could overflow an on-stack buffer during range     reduction if an input to an 80-bit long double function     contains a non-canonical bit pattern, a seen when     passing a 0x5d414141414141410000 value to sinl on x86     targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.(CVE-2020-10029)

  - A use-after-free vulnerability introduced in glibc     upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing     an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit     this flaw by creating a specially crafted path that,     when processed by the glob function, would potentially     lead to arbitrary code execution. This was fixed in     version 2.32.(CVE-2020-1752)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1123-1 advisory.

  - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde     expansion was carried out. Directory paths containing an initial tilde followed by a valid username were     affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path     that, when processed by the glob function, would potentially lead to arbitrary code execution. This was     fixed in version 2.32. (CVE-2020-1752)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glibc installed on the remote host is prior to 2.26-37. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2221 advisory.

    A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not     ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to     force system to utilize only half of the memory (making the system think the software is 32-bit only),     thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest     threat is confidentiality although the complexity of attack is high. The affected application must already     have other vulnerabilities for this flaw to be usable. (CVE-2019-19126)

    A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack     corruption due to a stack-based overflow. The highest threat from this vulnerability is to system     availability. (CVE-2020-10029)

    A use-after-free vulnerability was found in glibc in the way the tilde expansion was carried out.
    Directory paths containing an initial tilde followed by a valid username were affected by this issue. A     local attacker could exploit this flaw by creating a specially crafted path that, when processed by the     glob function, would potentially lead to arbitrary code execution. (CVE-2020-1752)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-1011:05 advisory.

    * glibc: array overflow in backtrace functions for powerpc (CVE-2020-1751)
      * glibc: use-after-free in glob() function when expanding ~user (CVE-2020-1752)
      * glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions (CVE-2020-10029)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
145977	CentOS 8 : glibc (CESA-2020:4444)	Nessus	CentOS Local Security Checks	2021/2/1	2024/1/24	high
135209	Fedora 31 : glibc (2020-244efc27af)	Nessus	Fedora Local Security Checks	2020/4/6	2024/3/19	high
184271	F5 Networks BIG-IP : glibc vulnerability (K49921213)	Nessus	F5 Networks Local Security Checks	2023/11/2	2024/5/7	high
147246	NewStart CGSL MAIN 6.02 : glibc Multiple Vulnerabilities (NS-SA-2021-0069)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2022/5/10	high
238827	TencentOS Server 3: glibc (TSSA-2022:0122)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
135165	SUSE SLES12 Security Update : glibc (SUSE-SU-2020:0832-1)	Nessus	SuSE Local Security Checks	2020/4/2	2024/3/19	high
166426	Debian dla-3152 : glibc-doc - security update	Nessus	Debian Local Security Checks	2022/10/23	2025/1/22	critical
138166	Ubuntu 16.04 LTS / 18.04 LTS : GNU C Library vulnerabilities (USN-4416-1)	Nessus	Ubuntu Local Security Checks	2020/7/7	2025/9/3	critical
236471	Alibaba Cloud Linux 3 : 0122: glibc (ALINUX3-SA-2022:0122)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
223369	Linux Distros Unpatched Vulnerability : CVE-2020-1752	Nessus	Misc.	2025/3/4	2025/9/3	high
137198	Photon OS 2.0: Glibc PHSA-2020-2.0-0248	Nessus	PhotonOS Local Security Checks	2020/6/6	2024/7/23	high
135372	Fedora 30 : glibc (2020-7f625c5ea8)	Nessus	Fedora Local Security Checks	2020/4/10	2024/3/19	high
137931	EulerOS Virtualization 3.0.6.0 : glibc (EulerOS-SA-2020-1712)	Nessus	Huawei Local Security Checks	2020/7/1	2024/3/5	high
159567	SUSE SLES12 Security Update : glibc (SUSE-SU-2022:1123-1)	Nessus	SuSE Local Security Checks	2022/4/7	2023/7/13	high
180079	Amazon Linux 2 : glibc (ALAS-2023-2221)	Nessus	Amazon Linux Local Security Checks	2023/8/23	2024/12/11	high
294422	MiracleLinux 8 : glibc-2.28-127.el8 (AXSA:2020-1011:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

critical

critical

high

high

high

high

high

high

high

high