Linux Distros Unpatched Vulnerability : CVE-2016-3189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service crash via a crafted bzip2 file, related to bloc...

Linux Distros Unpatched Vulnerability : CVE-2016-4975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Possible CRLF injection allowing HTTP response splitting attacks for sites which use moduserdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32...

Linux Distros Unpatched Vulnerability : CVE-2016-6349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command...

Linux Distros Unpatched Vulnerability : CVE-2016-8883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcdectiledecode function in jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service assertion failure via a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2016-10071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of- bounds read and application crash via a crafted mat file...

Linux Distros Unpatched Vulnerability : CVE-2016-2197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU aka Quick Emulator built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Informati...

Linux Distros Unpatched Vulnerability : CVE-2016-4008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1DECODEFLAGSTRICTDER flag, allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2016-2781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters...

Linux Distros Unpatched Vulnerability : CVE-2016-9803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In BlueZ 5.42, an out-of-bounds read was observed in lemetaevdump function in tools/parser/hci.c source file. This issue exists because 'subevent' which is used...

Linux Distros Unpatched Vulnerability : CVE-2016-7937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vatprint. CVE-2016-7937 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2016-10059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service application crash or have unspecified other...

Linux Distros Unpatched Vulnerability : CVE-2016-3622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error...

Linux Distros Unpatched Vulnerability : CVE-2016-9375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was...

Linux Distros Unpatched Vulnerability : CVE-2016-1000033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle...

Linux Distros Unpatched Vulnerability : CVE-2016-7130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2016-9435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application...

Linux Distros Unpatched Vulnerability : CVE-2016-6509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2016-7953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string. CVE-2016-7953 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2016-9138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during wakeup processing, which allows remote attackers to cause a denial of service ...

Linux Distros Unpatched Vulnerability : CVE-2016-9811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial ...