According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An allocation of memory without limits, that could     result in the stack clashing with another memory     region, was discovered in systemd-journald when a     program with long command line arguments calls syslog.
    A local attacker may use this flaw to crash     systemd-journald or escalate his     privileges.(CVE-2018-16864)

  - An allocation of memory without limits, that could     result in the stack clashing with another memory     region, was discovered in systemd-journald when many     entries are sent to the journal socket. A local     attacker, or a remote one if systemd-journal-remote is     used, may use this flaw to crash systemd-journald or     execute code with journald privileges.(CVE-2018-16865)

  - It was discovered that systemd-network does not     correctly keep track of a buffer size when constructing     DHCPv6 packets. This flaw may lead to an integer     underflow that can be used to produce an heap-based     buffer overflow. A malicious host on the same network     segment as the victim's one may advertise itself as a     DHCPv6 server and exploit this flaw to cause a Denial     of Service or potentially gain code execution on the     victim's machine.(CVE-2018-15688)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - systemd: Out-of-bounds heap write in systemd-networkd     dhcpv6 option handling (CVE-2018-15688)

  - systemd: stack overflow when calling syslog from a     command with long cmdline (CVE-2018-16864)

  - systemd: stack overflow when receiving many journald     entries (CVE-2018-16865)

  - systemd: Insufficient input validation in     bus_process_object() resulting in PID 1 crash     (CVE-2019-6454)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An allocation of memory without limits, that could     result in the stack clashing with another memory     region, was discovered in systemd-journald when many     entries are sent to the journal socket. A local     attacker, or a remote one if systemd-journal-remote is     used, may use this flaw to crash systemd-journald or     execute code with journald     privileges.i1/4^CVE-2018-16865i1/4%0

  - It was discovered that systemd-network does not     correctly keep track of a buffer size when constructing     DHCPv6 packets. This flaw may lead to an integer     underflow that can be used to produce an heap-based     buffer overflow. A malicious host on the same network     segment as the victim's one may advertise itself as a     DHCPv6 server and exploit this flaw to cause a Denial     of Service or potentially gain code execution on the     victim's machine.i1/4^CVE-2018-15688i1/4%0

  - An allocation of memory without limits, that could     result in the stack clashing with another memory     region, was discovered in systemd-journald when a     program with long command line arguments calls syslog.
    A local attacker may use this flaw to crash     systemd-journald or escalate     privileges.i1/4^CVE-2018-16864i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0361 advisory.

    The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization     Manager. The appliance is available to download as an OVA file from the Customer Portal.

    Security Fix(es):

    * systemd: stack overflow when calling syslog from a command with long cmdline (CVE-2018-16864)

    * systemd: stack overflow when receiving many journald entries (CVE-2018-16865)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3855-1 advisory.

    It was discovered that systemd-journald allocated variable-length buffers for certain message fields on     the stack. A local attacker could potentially exploit this to cause a denial of service, or execute     arbitrary code. (CVE-2018-16864)

    It was discovered that systemd-journald allocated variable-length arrays of objects representing message     fields on the stack. A local attacker could potentially exploit this to cause a denial of service, or     execute arbitrary code. (CVE-2018-16865)

    An out-of-bounds read was discovered in systemd-journald. A local attacker could potentially exploit this     to obtain sensitive information and bypass ASLR protections. (CVE-2018-16866)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0049 advisory.

    [219-62.0.4]
    - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
    - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
    - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
    - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [22224874]
    - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
    - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]

    [219-62.2]
    - journald: do not store the iovec entry for process commandline on stack (#1657788)
    - journald: set a limit on the number of fields (1k) (#1657792)
    - journal-remote: set a limit on the number of fields in a message (#1657792)

    [219-62.1]
    - dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate privileges.(CVE-2018-16864)

It was discovered that systemd-network does not correctly keep track of a buffer size when constructing DHCPv6 packets. This flaw may lead to an integer underflow that can be used to produce an heap-based buffer overflow. A malicious host on the same network segment as the victim's one may advertise itself as a DHCPv6 server and exploit this flaw to cause a Denial of Service or potentially gain code execution on the victim's machine.(CVE-2018-15688)

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges.(CVE-2018-16865)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - systemd: Out-of-bounds heap write in systemd-networkd     dhcpv6 option handling (CVE-2018-15688)

  - systemd: stack overflow when calling syslog from a     command with long cmdline (CVE-2018-16864)

  - systemd: stack overflow when receiving many journald     entries (CVE-2018-16865)

  - systemd: Assertion failure when PID 1 receives a     zero-length message over notify socket(CVE-2016-7795)

  - systemd: Unsafe handling of hard links allowing     privilege escalation(CVE-2017-18078)

  - systemd: Out-of-bounds write in systemd-resolved due to     allocating too small buffer in     dns_packet_new(CVE-2017-9445)

  - systemd: memory leak in journald-server.c introduced by     fix for CVE-2018-16864 (CVE-2019-3815)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has systemd packages installed that are affected by multiple vulnerabilities:

  - It was discovered that systemd-network does not     correctly keep track of a buffer size when constructing     DHCPv6 packets. This flaw may lead to an integer     underflow that can be used to produce an heap-based     buffer overflow. A malicious host on the same network     segment as the victim's one may advertise itself as a     DHCPv6 server and exploit this flaw to cause a Denial of     Service or potentially gain code execution on the     victim's machine. (CVE-2018-15688)

  - An allocation of memory without limits, that could     result in the stack clashing with another memory region,     was discovered in systemd-journald when many entries are     sent to the journal socket. A local attacker, or a     remote one if systemd-journal-remote is used, may use     this flaw to crash systemd-journald or execute code with     journald privileges. (CVE-2018-16865)

  - An allocation of memory without limits, that could     result in the stack clashing with another memory region,     was discovered in systemd-journald when a program with     long command line arguments calls syslog. A local     attacker may use this flaw to crash systemd-journald or     escalate privileges. (CVE-2018-16864)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
124919	EulerOS Virtualization 3.0.1.0 : systemd (EulerOS-SA-2019-1416)	Nessus	Huawei Local Security Checks	2019/5/14	2022/2/1	high
123120	EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1107)	Nessus	Huawei Local Security Checks	2019/3/26	2022/2/1	high
123701	EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1233)	Nessus	Huawei Local Security Checks	2019/4/4	2022/2/1	high
122331	RHEL 7 : rhvm-appliance (RHSA-2019:0361)	Nessus	Red Hat Local Security Checks	2019/2/20	2024/11/6	high
121161	Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerabilities (USN-3855-1)	Nessus	Ubuntu Local Security Checks	2019/1/14	2024/8/27	high
121172	Oracle Linux 7 : systemd (ELSA-2019-0049)	Nessus	Oracle Linux Local Security Checks	2019/1/15	2024/11/1	high
122161	Amazon Linux 2 : systemd (ALAS-2019-1160)	Nessus	Amazon Linux Local Security Checks	2019/2/14	2022/2/2	high
122218	EulerOS 2.0 SP5 : systemd (EulerOS-SA-2019-1045)	Nessus	Huawei Local Security Checks	2019/2/15	2022/2/1	high
127236	NewStart CGSL CORE 5.04 / MAIN 5.04 : systemd Multiple Vulnerabilities (NS-SA-2019-0051)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2022/2/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

high