Linux Distros Unpatched Vulnerability : CVE-2017-11572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts parsettf.c resulting in DoS or code execution via a crafted otf file...

Linux Distros Unpatched Vulnerability : CVE-2017-12996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print. CVE-2017-12996 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2017-12180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execu...

Linux Distros Unpatched Vulnerability : CVE-2017-8309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the audio/audio.c in QEMU aka Quick Emulator allows remote attackers to cause a denial of service memory consumption by repeatedly starting and...

Linux Distros Unpatched Vulnerability : CVE-2017-7395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server. CVE-2017-7395 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-6435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption via a crafted plist...

Linux Distros Unpatched Vulnerability : CVE-2017-5464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2017-9048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively...

Linux Distros Unpatched Vulnerability : CVE-2017-7273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-14342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. CVE-2017-14342 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2017-11434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dhcpdecode function in slirp/bootp.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process...

Linux Distros Unpatched Vulnerability : CVE-2017-14928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document. CVE-2017-14928 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-6512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vecto...

Linux Distros Unpatched Vulnerability : CVE-2017-7482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the...

Linux Distros Unpatched Vulnerability : CVE-2017-5447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2017-16879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the ncwriteentry function in tinfo/writeentry.c in ncurses 6.0 allows attackers to cause a denial of service application crash or...

Linux Distros Unpatched Vulnerability : CVE-2017-9164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:16:11. CVE-2017-9164 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-9461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption d...

Linux Distros Unpatched Vulnerability : CVE-2017-2998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to...

Linux Distros Unpatched Vulnerability : CVE-2017-17124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdcoffreadstringtable function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not properly...