According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In the GNU C Library (aka glibc or libc6) through 2.28,     the getaddrinfo function would successfully parse a     string that contained an IPv4 address followed by     whitespace and arbitrary characters, which could lead     applications to incorrectly assume that it had parsed a     valid string, without the possibility of embedded HTTP     headers or other potentially dangerous     substrings.(CVE-2016-10739)

  - On the x86-64 architecture, the GNU C Library (aka     glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during     program execution after a security transition, allowing     local attackers to restrict the possible mapping     addresses for loaded libraries and thus bypass ASLR for     a setuid program.(CVE-2019-19126)

  - The string component in the GNU C Library (aka glibc or     libc6) through 2.28, when running on the x32     architecture, incorrectly attempts to use a 64-bit     register for size_t in assembly codes, which can lead     to a segmentation fault or possibly unspecified other     impact, as demonstrated by a crash in
    __memmove_avx_unaligned_erms in     sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S     during a memcpy.(CVE-2019-6488)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2.28までの GNU C ライブラリ別名 glibc または libc6の string コンポーネントは、x32 アーキテクチャで実行中、アセンブリコードの size_t に対して 64 ビットレジスタを不適切に使用しようとします。これにより、セグメンテーション違反またはのクラッシュで示されているように、特定されていないその他の影響
    memcpy 中に sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S の __memmove_avx_unaligned_erms が実行される可能性があります。
    (CVE-2019-6488)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  GNU C 库 (亦即 glibc 或 libc6) 及之前 2.28版本中的字符串组件在 x32 架构上运行时错误地尝试针对汇编代码中的 size_t 使用 64 位寄存器这可导致分段错误或可能中的崩溃已证实存在其他不明影响
    memcpy 期间sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S 中的 __memmove_avx_unaligned_erms。
    (CVE-2019-6488)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 2.28版之前的 GNU C 程式庫 (亦即 glibc 或 libc6) 中的字串元件在 x32 架構上執行時會不正確地嘗試對組件程式碼中的 size_t 使用 64 位元暫存器這可能會導致分割錯誤或的不明其他影響如 中的一個當機所示
    在 memcpy 期間發生 sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S 中的 __memmove_avx_unaligned_erms。
    (CVE-2019-6488)

請注意，Nessus 依賴供應商報告的套件存在。

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The string component in the GNU C Library (aka glibc or     libc6) through 2.28, when running on the x32     architecture, incorrectly attempts to use a 64-bit     register for size_t in assembly codes, which can lead     to a segmentation fault or possibly unspecified other     impact, as demonstrated by a crash in
    __memmove_avx_unaligned_erms in     sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S     during a memcpy.(CVE-2019-6488)

  - On the x86-64 architecture, the GNU C Library (aka     glibc) before 2.31 fails to ignore the     LD_PREFER_MAP_32BIT_EXEC environment variable during     program execution after a security transition, allowing     local attackers to restrict the possible mapping     addresses for loaded libraries and thus bypass ASLR for     a setuid program.(CVE-2019-19126)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202006-04 (glibc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in glibc. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32     architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead     to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in
    __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy.
    (CVE-2019-6488)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The glibc package contains standard libraries which are     used by multiple programs on the system. In order to     save disk space and memory, as well as to make     upgrading easier, common system code is kept in one     place and shared between programs. This particular     package contains the most important sets of shared     libraries: the standard C library and the standard math     library. Without these two libraries, a Linux system     will not function.Security Fix(es):The string component     in the GNU C Library (aka glibc or libc6) through 2.28,     when running on the x32 architecture, incorrectly     attempts to use a 64-bit register for size_t in     assembly codes, which can lead to a segmentation fault     or possibly unspecified other impact, as demonstrated     by a crash in __memmove_avx_unaligned_erms in     sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S     during a memcpy.(CVE-2019-6488)** DISPUTED ** In the     GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(|)(\\1\\1)*' in grep, a different issue than     CVE-2018-20796. NOTE: the software maintainer disputes     that this is a vulnerability because the behavior     occurs only with a crafted pattern.(CVE-2019-9192)In     the GNU C Library (aka glibc or libc6) through 2.29,     check_dst_limits_calc_pos_1 in posix/regexec.c has     Uncontrolled Recursion, as demonstrated by     '(\227|)(\\1\\1|t1|\\\2537)+' in     grep.(CVE-2018-20796)The GNU C Library (aka glibc or     libc6) before 2.32 could overflow an on-stack buffer     during range reduction if an input to an 80-bit long     double function contains a non-canonical bit pattern, a     seen when passing a 0x5d414141414141410000 value to     sinl on x86 targets. This is related to     sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.(CVE-2020-10029)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
132795	EulerOS Virtualization for ARM 64 3.0.5.0 : glibc (EulerOS-SA-2020-1041)	Nessus	Huawei Local Security Checks	2020/1/13	2021/1/6	high
248349	Linux Distros のパッチ未適用の脆弱性: CVE-2019-6488	Nessus	Misc.	2025/8/11	2025/8/11	high
248349	Linux Distros 未修补的漏洞：CVE-2019-6488	Nessus	Misc.	2025/8/11	2025/8/11	high
248349	Linux Distros 未修補的弱點：CVE-2019-6488	Nessus	Misc.	2025/8/11	2025/8/11	high
132600	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2020-1007)	Nessus	Huawei Local Security Checks	2020/1/2	2024/4/2	high
137441	GLSA-202006-04 : glibc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/6/17	2024/3/7	critical
248349	Linux Distros Unpatched Vulnerability : CVE-2019-6488	Nessus	Misc.	2025/8/11	2025/8/11	high
136217	EulerOS Virtualization for ARM 64 3.0.2.0 : glibc (EulerOS-SA-2020-1514)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/14	high

検出

プラグインの検索

high

high

high

high

high

critical

high

high