Linux Distros Unpatched Vulnerability : CVE-2016-1905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2016-7935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint. CVE-2016-7935 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2016-7974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions. CVE-2016-7974 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2016-5041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using...

Linux Distros Unpatched Vulnerability : CVE-2016-2570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP...

Linux Distros Unpatched Vulnerability : CVE-2016-5037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2016-4348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsvgcssnormalizefontsize function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service stack consumption and application crash...

Linux Distros Unpatched Vulnerability : CVE-2016-7957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in...

Linux Distros Unpatched Vulnerability : CVE-2016-5018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a...

Linux Distros Unpatched Vulnerability : CVE-2016-3624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the...

Linux Distros Unpatched Vulnerability : CVE-2016-6295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection,...

Linux Distros Unpatched Vulnerability : CVE-2016-3138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The acmprobe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL...

Linux Distros Unpatched Vulnerability : CVE-2016-2779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffe...

Linux Distros Unpatched Vulnerability : CVE-2016-3710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2016-9907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector i...

Linux Distros Unpatched Vulnerability : CVE-2016-6209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Nagios. CVE-2016-6209 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

Linux Distros Unpatched Vulnerability : CVE-2016-7136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross- site scripting XSS attacks via a crafted GET request...

Linux Distros Unpatched Vulnerability : CVE-2016-2568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the...

Linux Distros Unpatched Vulnerability : CVE-2016-9794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a...

Linux Distros Unpatched Vulnerability : CVE-2016-5096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service ...