Linux Distros Unpatched Vulnerability : CVE-2016-9797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In BlueZ 5.42, a buffer over-read was observed in l2capdump function in tools/parser/l2cap.c source file. This issue can be triggered by processing a corrupted...

Linux Distros Unpatched Vulnerability : CVE-2016-7411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memo...

Linux Distros Unpatched Vulnerability : CVE-2016-2188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2016-7943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger...

Linux Distros Unpatched Vulnerability : CVE-2016-7928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint. CVE-2016-7928 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2016-9074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services NSS 3.26.1. Th...

Linux Distros Unpatched Vulnerability : CVE-2016-10741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.9.3, fs/xfs/xfsaops.c allows local users to cause a denial of service system crash because there is a race condition between direct...

Linux Distros Unpatched Vulnerability : CVE-2016-6261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via ...

Linux Distros Unpatched Vulnerability : CVE-2016-7954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this...

Linux Distros Unpatched Vulnerability : CVE-2016-9189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the crafted image file approach, related to an Integer Overflow...

Linux Distros Unpatched Vulnerability : CVE-2016-7392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the pstoeditsuffixtableinit function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2016-8574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print. CVE-2016-8574 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2016-9398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2016-0821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the...

Linux Distros Unpatched Vulnerability : CVE-2016-4447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread...

Linux Distros Unpatched Vulnerability : CVE-2016-9137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2016-7517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PICT file...

Linux Distros Unpatched Vulnerability : CVE-2016-5004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service resource consumption ...

Linux Distros Unpatched Vulnerability : CVE-2016-7994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the virtiogpuresourcecreate2d function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2016-5042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfgetarangeslist function in libdwarf before 20160923 allows remote attackers to cause a denial of service infinite loop and crash via a crafted DWARF...