In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It     may use the notification thread attributes object (passed through its struct sigevent parameter) after it     has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified     other impact. (CVE-2021-33574)

  - The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in     parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in     a denial of service or disclosure of information. This occurs because atoi was used but strtoul should     have been used to ensure correct calculations. (CVE-2021-35942)

  - In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles     certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was     introduced as a side effect of the CVE-2021-33574 fix. (CVE-2021-38604)

  - In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to     emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state     reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states 'the bug     cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to     require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
    (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to     emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state     reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states 'the bug     cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to     require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
    (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when     processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in     degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
    (CVE-2021-27645)

  - ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can     force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an     internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states     'the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which     ought to require a separate application bug to do so unintentionally. Hence there's no security impact to     the bug.' (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc)     through 2.34 copies its hostname argument on the stack without validating its length, which may result in     a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a     stack protector enabled) arbitrary code execution. (CVE-2022-23219)

  - A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory     corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and     size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and     escalate their privileges on the system. (CVE-2021-3999)

  - ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can     force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an     internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states     the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which     ought to require a separate application bug to do so unintentionally. Hence there's no security impact to     the bug. (CVE-2021-43396)

  - The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc)     through 2.34 copies its path argument on the stack without validating its length, which may result in a     buffer overflow, potentially resulting in a denial of service or (if an application is not built with a     stack protector enabled) arbitrary code execution. (CVE-2022-23218)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can     force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an     internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states     'the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which     ought to require a separate application bug to do so unintentionally. Hence there's no security impact to     the bug.' (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can     force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an     internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states     'the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which     ought to require a separate application bug to do so unintentionally. Hence there's no security impact to     the bug.' (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in     parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in     a denial of service or disclosure of information. This occurs because atoi was used but strtoul should     have been used to ensure correct calculations. (CVE-2021-35942)

  - In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles     certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was     introduced as a side effect of the CVE-2021-33574 fix. (CVE-2021-38604)

  - ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can     force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an     internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states     'the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which     ought to require a separate application bug to do so unintentionally. Hence there's no security impact to     the bug.' (CVE-2021-43396)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
170800	EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2023-1254)	Nessus	Huawei Local Security Checks	critical
169618	EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2023-1064)	Nessus	Huawei Local Security Checks	high
165873	EulerOS Virtualization 3.0.6.6 : glibc (EulerOS-SA-2022-2501)	Nessus	Huawei Local Security Checks	high
160707	EulerOS Virtualization 3.0.2.0 : glibc (EulerOS-SA-2022-1678)	Nessus	Huawei Local Security Checks	critical
159850	EulerOS Virtualization 2.10.1 : glibc (EulerOS-SA-2022-1371)	Nessus	Huawei Local Security Checks	high
159845	EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2022-1397)	Nessus	Huawei Local Security Checks	high
158491	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2022-1267)	Nessus	Huawei Local Security Checks	high
158418	EulerOS 2.0 SP10 : glibc (EulerOS-SA-2022-1252)	Nessus	Huawei Local Security Checks	high
158362	EulerOS 2.0 SP10 : glibc (EulerOS-SA-2022-1240)	Nessus	Huawei Local Security Checks	high
158289	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2022-1164)	Nessus	Huawei Local Security Checks	critical
157212	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2022-1006)	Nessus	Huawei Local Security Checks	high
157175	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2022-1026)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2021-43396

high

Tenable Plugins

critical

high

high

critical

high

high

high

high

high

critical

high

high