According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):In the GNU C Library     (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)GNU     Libc current is affected by: Re-mapping current loaded     library with malicious ELF file. The impact is: In     worst case attacker may evaluate privileges. The     component is: libld. The attack vector is: Attacker     sends 2 ELF files to victim and asks to run ldd on it.
    ldd execute code.(CVE-2019-1010023)In the GNU C Library     (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in grep.(CVE-2018-20796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in grep.(CVE-2018-20796)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)

  - On the x86-64 architecture, the GNU C Library (aka     glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during     program execution after a security transition, allowing     local attackers to restrict the possible mapping     addresses for loaded libraries and thus bypass ASLR for     a setuid program.(CVE-2019-19126)

  - In the GNU C Library (aka glibc or libc6) through 2.28,     the getaddrinfo function would successfully parse a     string that contained an IPv4 address followed by     whitespace and arbitrary characters, which could lead     applications to incorrectly assume that it had parsed a     valid string, without the possibility of embedded HTTP     headers or other potentially dangerous     substrings.(CVE-2016-10739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):The string component     in the GNU C Library (aka glibc or libc6) through 2.28,     when running on the x32 architecture, incorrectly     attempts to use a 64-bit register for size_t in     assembly codes, which can lead to a segmentation fault     or possibly unspecified other impact, as demonstrated     by a crash in __memmove_avx_unaligned_erms in     sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S     during a memcpy.(CVE-2019-6488)** DISPUTED ** In the     GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)The GNU C Library (aka glibc or     libc6) before 2.32 could overflow an on-stack buffer     during range reduction if an input to an 80-bit long     double function contains a non-canonical bit pattern, a     seen when passing a 0x5d414141414141410000 value to     sinl on x86 targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.(CVE-2020-10029)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In the GNU C Library (aka glibc or     libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(|)(\\1\\1)*' in grep, a different     issue than CVE-2018-20796. NOTE: the software     maintainer disputes that this is a vulnerability     because the behavior occurs only with a crafted     pattern.(CVE-2019-9192)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in grep.(CVE-2018-20796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In the GNU C Library (aka glibc or libc6) through 2.28,     the getaddrinfo function would successfully parse a     string that contained an IPv4 address followed by     whitespace and arbitrary characters, which could lead     applications to incorrectly assume that it had parsed a     valid string, without the possibility of embedded HTTP     headers or other potentially dangerous     substrings.(CVE-2016-10739)

  - Stack-based buffer overflow in the glob implementation     in GNU C Library (aka glibc) before 2.24, when     GLOB_ALTDIRFUNC is used, allows context-dependent     attackers to cause a denial of service (crash) via a     long name.(CVE-2016-1234)

  - Use-after-free vulnerability in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) before 2.26 allows remote attackers to     have unspecified impact via vectors related to error     path.(CVE-2017-12133)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in grep.(CVE-2018-20796)

  - ** DISPUTED ** In the GNU C Library (aka glibc or     libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(|)(\\1\\1)*' in grep, a different     issue than CVE-2018-20796. NOTE: the software     maintainer disputes that this is a vulnerability     because the behavior occurs only with a crafted     pattern.(CVE-2019-9192)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2.29までの GNU C ライブラリ別名 glibc または libc6では、posix/regexec.c の check_dst_limits_calc_pos_1 にコントロールされていない再帰があります。これは grep の「(|)(\\1\\1)*」によって実証されており、別の問題です。より前の CVE-2018-20796。
    注ソフトウェアのメンテナーは、この動作が細工されたパターンでのみ発生するため、これは脆弱性であるという異議申し立てを異議申し立てしていますCVE-2019-9192

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在到 2.29之前的 GNU C 程式庫 (即 glibc 或 libc6) 中posix/regexec.c 中的 check_dst_limits_calc_pos_1 有不受控制的遞回如 grep 中的「(|)(\1\1)*」所示為另一個問題比 CVE-2018-20796。
    注意軟體維護者有爭議這是一個弱點因為只有特製的模式才會發生此行為 (CVE-2019-9192)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 GNU C 库又称为 glibc 或 libc6 及之前版本中 2.29中 posix/regexec.c 中的 check_dst_limits_calc_pos_1 存在不受控制的递归如 grep 中的“(|)(\1\1)*”所示这是不同的问题比 CVE-2018-20796。
    注意软件维护者认为这是一个漏洞因为此行为仅会在使用特别构建的模式时发生 (CVE-2019-9192)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796.
    NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with     a crafted pattern (CVE-2019-9192)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):GNU Libc current is     affected by: Re-mapping current loaded library with     malicious ELF file. The impact is: In worst case     attacker may evaluate privileges. The component is:
    libld. The attack vector is: Attacker sends 2 ELF files     to victim and asks to run ldd on it. ldd execute     code.(CVE-2019-1010023)In the GNU C Library (aka glibc     or libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(|)(\\1\\1)*' in grep, a different     issue than CVE-2018-20796. NOTE: the software     maintainer disputes that this is a vulnerability     because the behavior occurs only with a crafted     pattern.(CVE-2019-9192)In the GNU C Library (aka glibc     or libc6) through 2.29, check_dst_limits_calc_pos_1 in     posix/regexec.c has Uncontrolled Recursion, as     demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):Stack-based buffer     overflow in the getaddrinfo function in     sysdeps/posix/getaddrinfo.c in the GNU C Library (aka     glibc or libc6) allows remote attackers to cause a     denial of service (crash) via vectors involving hostent     conversion. NOTE: this vulnerability exists because of     an incomplete fix for CVE-2013-4458.(CVE-2016-3706)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)GNU Libc current is affected by:
    Re-mapping current loaded library with malicious ELF     file. The impact is: In worst case attacker may     evaluate privileges. The component is: libld. The     attack vector is: Attacker sends 2 ELF files to victim     and asks to run ldd on it. ldd execute     code.(CVE-2019-1010023)A use-after-free vulnerability     introduced in glibc upstream version 2.14 was found in     the way the tilde expansion was carried out. Directory     paths containing an initial tilde followed by a valid     username were affected by this issue. A local attacker     could exploit this flaw by creating a specially crafted     path that, when processed by the glob function, would     potentially lead to arbitrary code execution. This was     fixed in version 2.32.(CVE-2020-1752)The GNU C Library     (aka glibc or libc6) before 2.32 could overflow an     on-stack buffer during range reduction if an input to     an 80-bit long double function contains a non-canonical     bit pattern, a seen when passing a     0x5d414141414141410000 value to sinl on x86 targets.
    This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.(CVE-2020-10029)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
133903	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2020-1102)	Nessus	Huawei Local Security Checks	2020/2/24	2024/3/26	high
135517	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2020-1388)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	medium
136217	EulerOS Virtualization for ARM 64 3.0.2.0 : glibc (EulerOS-SA-2020-1514)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/14	high
135117	EulerOS Virtualization for ARM 64 3.0.6.0 : glibc (EulerOS-SA-2020-1330)	Nessus	Huawei Local Security Checks	2020/4/2	2024/3/20	high
135640	EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2020-1478)	Nessus	Huawei Local Security Checks	2020/4/16	2025/2/21	medium
254920	Linux Distros のパッチ未適用の脆弱性: CVE-2019-9192	Nessus	Misc.	2025/8/25	2025/8/25	high
254920	Linux Distros 未修補的弱點：CVE-2019-9192	Nessus	Misc.	2025/8/25	2025/8/25	high
254920	Linux Distros 未修补的漏洞：CVE-2019-9192	Nessus	Misc.	2025/8/25	2025/8/25	high
254920	Linux Distros Unpatched Vulnerability : CVE-2019-9192	Nessus	Misc.	2025/8/25	2025/8/25	high
133986	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2020-1152)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high
137509	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2020-1667)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	high

检测

插件搜索

high

medium

high

high

medium

high

high

high

high

high

high