This update for zlib fixes the following issues :

  - Remove incompatible declarations of 'struct     internal_state' (boo#1003577)

  - Avoid out-of-bounds pointer arithmetic in inftrees.c     (boo#1003579, CVE-2016-9840, CVE-2016-9841)

  - Avoid left-shift with negative number (boo#1003580,     CVE-2016-9842)

  - Avoid undefined behaviour in pointer arithmetic on     powerpc (boo#1013882, CVE-2016-9843)

According to the versions of the deltarpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an     invalid file that causes a large dynamic tree to be produced. (CVE-2005-1849)

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9841)

  - The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving big-endian CRC calculation. (CVE-2016-9843)

  - zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many     distant matches. (CVE-2018-25032)

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the syslinux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9841)

  - The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving left shifts of negative integers. (CVE-2016-9842)

  - The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving big-endian CRC calculation. (CVE-2016-9843)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for java-1_8_0-openjdk fixes the following issues :

  - Update to version jdk8u151 (icedtea 3.6.0) Security     issues fixed :

  - CVE-2017-10274: Handle smartcard clean up better     (bsc#1064071)

  - CVE-2017-10281: Better queuing priorities (bsc#1064072)

  - CVE-2017-10285: Unreferenced references (bsc#1064073)

  - CVE-2017-10295: Better URL connections (bsc#1064075)

  - CVE-2017-10388: Correct Kerberos ticket grants     (bsc#1064086)

  - CVE-2017-10346: Better invokespecial checks     (bsc#1064078)

  - CVE-2017-10350: Better Base Exceptions (bsc#1064082)

  - CVE-2017-10347: Better timezone processing (bsc#1064079)

  - CVE-2017-10349: Better X processing (bsc#1064081)

  - CVE-2017-10345: Better keystore handling (bsc#1064077)

  - CVE-2017-10348: Better processing of unresolved     permissions (bsc#1064080)

  - CVE-2017-10357: Process Proxy presentation (bsc#1064085)

  - CVE-2017-10355: More stable connection processing     (bsc#1064083)

  - CVE-2017-10356: Update storage implementations     (bsc#1064084)

  - CVE-2016-10165: Improve CMS header processing     (bsc#1064069)

  - CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,     CVE-2016-9843: Upgrade compression library (bsc#1064070)     Bug fixes :

  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and     overlayfs

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

rsync developers reports :

Various zlib fixes, including security fixes for CVE-2016-9843, CVE-2016-9842, CVE-2016-9841, and CVE-2016-9840

According to the versions of the zlib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - inftrees.c in zlib 1.2.8 might allow context-dependent     attackers to have unspecified impact by leveraging     improper pointer arithmetic.(CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent     attackers to have unspecified impact by leveraging     improper pointer arithmetic.(CVE-2016-9841)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202007-54 (rsync: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in rsync (within bundled       zlib). Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.1.x prior to 9.1.1328.0 or 9.2.x prior to 9.2.11.19. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds pointer arithmetic error exists in     zlib within file inftrees.c. An unauthenticated, remote     attacker can exploit this, via a specially crafted     document, to cause a denial of service condition.
    (CVE-2016-9840)

  - An out-of-bounds pointer arithmetic error exists in     zlib within file inffast.c. An unauthenticated, remote     attacker can exploit this, via a specially crafted     document, to cause a denial of service condition.
    (CVE-2016-9841)

  - A flaw exists in zlib in the z_streamp() function     within file inflate.c that is related to left shifts of     negative numbers. An unauthenticated, remote     attacker can exploit this, via a specially crafted     document, to cause a denial of service condition.
    (CVE-2016-9842)

  - An out-of-bounds pointer flaw exists in the crc32_big()     function within file crc32.c when handling big-endian     pointer calculations. An unauthenticated, remote     attacker can exploit this, via a specially crafted     document, to cause a denial of service condition.
    (CVE-2016-9843)

  - A cross-site scripting (XSS) vulnerability exists in     the web-based user interface due to improper validation     of user-supplied input before returning it to users. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary script     code in a user's browser session. (CVE-2017-1203)

  - An XML external entity (XXE) injection flaw exists when     parsing XML data due to an incorrectly configured XML     parser accepting XML external entities from untrusted     sources. An authenticated, remote attacker can exploit     this, via specially crafted XML data, to disclose     sensitive information or cause a denial of service     condition. (CVE-2017-1219)

IBM BigFix Platform was formerly known as Tivoli Endpoint Manager, IBM Endpoint Manager, and IBM BigFix Endpoint Manager.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the deltarpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an     invalid file that causes a large dynamic tree to be produced. (CVE-2005-1849)

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9841)

  - The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving big-endian CRC calculation. (CVE-2016-9843)

  - zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many     distant matches. (CVE-2018-25032)

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Trail of Bits used the automated vulnerability discovery tools developed for the DARPA Cyber Grand Challenge to audit zlib. As rsync, a fast, versatile, remote (and local) file-copying tool, uses an embedded copy of zlib, those issues are also present in rsync.

CVE-2016-9840 In order to avoid undefined behavior, remove offset pointer optimization, as this is not compliant with the C standard.

CVE-2016-9841 Only use post-increment to be compliant with the C standard.

CVE-2016-9842 In order to avoid undefined behavior, do not shift negative values, as this is not compliant with the C standard.

CVE-2016-9843 In order to avoid undefined behavior, do not pre-decrement a pointer in big-endian CRC calculation, as this is not compliant with the C standard.

CVE-2018-5764 Prevent remote attackers from being able to bypass the argument-sanitization protection mechanism by ignoring --protect-args when already sent by client.

For Debian 8 'Jessie', these problems have been fixed in version 3.1.1-3+deb8u2.

We recommend that you upgrade your rsync packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3047 advisory.

  - zlib: Out-of-bounds pointer arithmetic in inftrees.c (CVE-2016-9840)

  - zlib: Out-of-bounds pointer arithmetic in inffast.c (CVE-2016-9841)

  - zlib: Undefined left shift of negative number (CVE-2016-9842)

  - zlib: Big-endian out-of-bounds pointer (CVE-2016-9843)

  - OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) (CVE-2017-10274)

  - OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)     (CVE-2017-10281)

  - OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) (CVE-2017-10285)

  - Oracle JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) (CVE-2017-10293)

  - OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) (CVE-2017-10295)

  - OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370) (CVE-2017-10345)

  - OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711) (CVE-2017-10346)

  - OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)     (CVE-2017-10347)

  - OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432) (CVE-2017-10348)

  - OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)     (CVE-2017-10349)

  - OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) (CVE-2017-10355)

  - OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) (CVE-2017-10356)

  - OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)     (CVE-2017-10357)

  - OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794) (CVE-2017-10388)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

The remote host is running a version of macOS that is prior to 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - AppSandbox
 - AppleScript
 - Application Firewall
 - ATS
 - Audio
 - CFNetwork
 - CFNetwork Proxies
 - CFString
 - Captive Network Assistant
 - CoreAudio
 - CoreText
 - DesktopServices
 - Directory Utility
 - file
 - Fonts
 - fsck_msdos
 - HFS
 - Heimdal
 - HelpViewer
 - IOFireWireFamily
 - ImageIO
 - Installer
 - Kernel
 - kext tools
 - libarchive
 - libc
 - libexpat
 - Mail
 - Mail Drafts
 - ntp
 - Open Scripting Architecture
 - PCRE
 - Postfix
 - Quick Look
 - QuickTime
 - Remote Management
 - SQLite
 - Sandbox
 - Screen Lock
 - Security
 - Spotlight
 - WebKit
 - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Published	Updated	Severity
95975	openSUSE Security Update : zlib (openSUSE-2016-1499)	Nessus	SuSE Local Security Checks	12/21/2016	1/19/2021	critical
167381	EulerOS 2.0 SP9 : deltarpm (EulerOS-SA-2022-2758)	Nessus	Huawei Local Security Checks	11/14/2022	10/4/2023	critical
188908	EulerOS 2.0 SP11 : syslinux (EulerOS-SA-2023-2871)	Nessus	Huawei Local Security Checks	1/16/2024	1/16/2024	critical
104531	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2017:2989-1)	Nessus	SuSE Local Security Checks	11/13/2017	1/6/2021	critical
139639	FreeBSD : net/rsync -- multiple zlib issues (085399ab-dfd7-11ea-96e4-80ee73bc7b66)	Nessus	FreeBSD Local Security Checks	8/18/2020	2/26/2024	critical
137960	EulerOS Virtualization 3.0.6.0 : zlib (EulerOS-SA-2020-1741)	Nessus	Huawei Local Security Checks	7/1/2020	3/5/2024	high
139117	GLSA-202007-54 : rsync: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	7/30/2020	2/27/2024	critical
102019	IBM BigFix Platform 9.1.x < 9.1.1328.0 / 9.2.x < 9.2.11.19 Multiple Vulnerabilities	Nessus	Web Servers	7/27/2017	11/12/2019	critical
168999	EulerOS 2.0 SP10 : deltarpm (EulerOS-SA-2022-2841)	Nessus	Huawei Local Security Checks	12/21/2022	9/12/2023	critical
123019	Debian DLA-1725-1 : rsync security update	Nessus	Debian Local Security Checks	3/25/2019	1/11/2021	critical
104140	RHEL 7 : java-1.6.0-sun (RHSA-2017:3047)	Nessus	Red Hat Local Security Checks	10/25/2017	4/27/2024	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/17/2019	4/17/2019	critical
700511	macOS < 10.13 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	4/10/2019	4/10/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

critical