According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):In the GNU C Library     (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)GNU     Libc current is affected by: Re-mapping current loaded     library with malicious ELF file. The impact is: In     worst case attacker may evaluate privileges. The     component is: libld. The attack vector is: Attacker     sends 2 ELF files to victim and asks to run ldd on it.
    ldd execute code.(CVE-2019-1010023)In the GNU C Library     (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in grep.(CVE-2018-20796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - GNU Libc 最新版本受到下列問題的影響以惡意 ELF 檔案重新對應目前載入的程式庫。影響為：
    在最壞的情況下攻擊者可能會評估權限。元件為libld。攻擊向量為攻擊者傳送 2 個 ELF 檔案給受害者並要求在其上執行 ldd。 ldd 執行程式碼。注意上游註解表示系統將此情況視為非安全性錯誤並無真正的威脅。 (CVE-2019-1010023)

請注意，Nessus 依賴供應商報告的套件存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is:
    In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker     sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate     this is being treated as a non-security bug and no real threat. (CVE-2019-1010023)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GNU Libc 現在は以下の影響を受けます。悪意のある ELF ファイルで現在ロードされているライブラリを再マッピングします。影響は次のとおりです。
    最悪の場合、攻撃者が権限を評価する可能性があります。コンポーネントは次のとおりですlibld。攻撃ベクトルは次のとおりです。攻撃者が 2 つの ELF ファイルを被害者に送信し、これ上で ldd を実行するよう要求します。 ldd がコードを実行する可能性があります。注Upstream のコメントは、これが非セキュリティバグとして扱われており、本当の脅威ではないことを示しています。CVE-2019-1010023

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - GNU Libc 当前版本受到下列问题的影响用恶意 ELF 文件重新映射当前加载的库。影响为：
    在最坏的情况下攻击者可能会评估权限。该组件为libld。攻击途径为攻击者向受害者发送 2 个 ELF 文件并要求在其上运行 ldd。 ldd 执行代码。注意上游注释表示此问题被视为非安全缺陷且不构成真正的威胁。 (CVE-2019-1010023)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU Libc current is affected by: Re-mapping current     loaded library with malicious ELF file. The impact is:
    In worst case attacker may evaluate privileges. The     component is: libld. The attack vector is: Attacker     sends 2 ELF files to victim and asks to run ldd on it.
    ldd execute code. NOTE: Upstream comments indicate     'this is being treated as a non-security bug and no     real threat.'(CVE-2019-1010023)

  - Stack-based buffer overflow in the getaddrinfo function     in sysdeps/posix/getaddrinfo.c in the GNU C Library     (aka glibc or libc6) allows remote attackers to cause a     denial of service (crash) via vectors involving hostent     conversion. NOTE: this vulnerability exists because of     an incomplete fix for CVE-2013-4458.(CVE-2016-3706)

  - The iconv feature in the GNU C Library (aka glibc or     libc6) through 2.32, when processing invalid multi-byte     input sequences in the EUC-KR encoding, may have a     buffer over-read.(CVE-2019-25013)

  - The iconv function in the GNU C Library (aka glibc or     libc6) 2.32 and earlier, when processing invalid input     sequences in the ISO-2022-JP-3 encoding, fails an     assertion in the code path and aborts the program,     potentially resulting in a denial of     service.(CVE-2021-3326)

  - The iconv function in the GNU C Library (aka glibc or     libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371,     IBM1388, IBM1390, and IBM1399 encodings, fails to     advance the input state, which could lead to an     infinite loop in applications, resulting in a denial of     service, a different vulnerability from     CVE-2016-10228.(CVE-2020-27618)

  - The makecontext function in the GNU C Library (aka     glibc or libc6) before 2.25 creates execution contexts     incompatible with the unwinder on ARM EABI (32-bit)     platforms, which might allow context-dependent     attackers to cause a denial of service (hang), as     demonstrated by applications compiled using gccgo,     related to backtrace generation.(CVE-2016-6323)

  - Use-after-free vulnerability in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) before 2.26 allows remote attackers to     have unspecified impact via vectors related to error     path.(CVE-2017-12133)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):Stack-based buffer     overflow in the getaddrinfo function in     sysdeps/posix/getaddrinfo.c in the GNU C Library (aka     glibc or libc6) allows remote attackers to cause a     denial of service (crash) via vectors involving hostent     conversion. NOTE: this vulnerability exists because of     an incomplete fix for CVE-2013-4458.(CVE-2016-3706)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)GNU Libc current is affected by:
    Re-mapping current loaded library with malicious ELF     file. The impact is: In worst case attacker may     evaluate privileges. The component is: libld. The     attack vector is: Attacker sends 2 ELF files to victim     and asks to run ldd on it. ldd execute     code.(CVE-2019-1010023)A use-after-free vulnerability     introduced in glibc upstream version 2.14 was found in     the way the tilde expansion was carried out. Directory     paths containing an initial tilde followed by a valid     username were affected by this issue. A local attacker     could exploit this flaw by creating a specially crafted     path that, when processed by the glob function, would     potentially lead to arbitrary code execution. This was     fixed in version 2.32.(CVE-2020-1752)The GNU C Library     (aka glibc or libc6) before 2.32 could overflow an     on-stack buffer during range reduction if an input to     an 80-bit long double function contains a non-canonical     bit pattern, a seen when passing a     0x5d414141414141410000 value to sinl on x86 targets.
    This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.(CVE-2020-10029)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):GNU Libc current is     affected by: Re-mapping current loaded library with     malicious ELF file. The impact is: In worst case     attacker may evaluate privileges. The component is:
    libld. The attack vector is: Attacker sends 2 ELF files     to victim and asks to run ldd on it. ldd execute     code.(CVE-2019-1010023)In the GNU C Library (aka glibc     or libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(|)(\\1\\1)*' in grep, a different     issue than CVE-2018-20796. NOTE: the software     maintainer disputes that this is a vulnerability     because the behavior occurs only with a crafted     pattern.(CVE-2019-9192)In the GNU C Library (aka glibc     or libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
133903	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2020-1102)	Nessus	Huawei Local Security Checks	2020/2/24	2024/3/26	high
250196	Linux Distros 未修補的弱點：CVE-2019-1010023	Nessus	Misc.	2025/8/15	2025/8/31	high
250196	Linux Distros Unpatched Vulnerability : CVE-2019-1010023	Nessus	Misc.	2025/8/15	2025/8/31	high
250196	Linux Distros のパッチ未適用の脆弱性: CVE-2019-1010023	Nessus	Misc.	2025/8/15	2025/8/31	high
250196	Linux Distros 未修补的漏洞：CVE-2019-1010023	Nessus	Misc.	2025/8/15	2025/8/31	high
149140	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2021-1790)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/3	high
137509	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2020-1667)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	high
133986	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2020-1152)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high

检测

插件搜索

high

high

high

high

high

high

high

high