According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability     affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation     leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the     identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted     at the moment. The inputs that induce this vulnerability are basically addresses of the running     application that is built with gmon enabled. It's basically trusted input or input that needs an actual     security flaw to be compromised or controlled.(CVE-2023-0687)

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to     it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to     crash an application or overwrite a neighbouring variable.(CVE-2024-2961)

Tenable has extracted the preceding description block directly from the EulerOS glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

EulerOS 2.0 SP8 : glibc (EulerOS-SA-2024-2466)

critical Nessus Plugin ID 207634

Version 1.2

Version 1.1

Version 1.2 Oct 21, 2024, 9:27 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202410210927
Version 1.1 Sep 24, 2024, 5:34 AM New Plugin Feed: 202409240534