Linux Distros Unpatched Vulnerability : CVE-2017-9173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:497:29. CVE-2017-9173 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2017-13716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessiv...

Linux Distros Unpatched Vulnerability : CVE-2017-16026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the...

Linux Distros Unpatched Vulnerability : CVE-2017-17885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-3735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of...

Linux Distros Unpatched Vulnerability : CVE-2017-17087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownership of the...

Linux Distros Unpatched Vulnerability : CVE-2017-11310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readuserchunkcallback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 beta has memory leak vulnerabilities via crafted PNG files...

Linux Distros Unpatched Vulnerability : CVE-2017-6467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in...

Linux Distros Unpatched Vulnerability : CVE-2017-6348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2017-14501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file...

Linux Distros Unpatched Vulnerability : CVE-2017-13166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167. CVE-2017-13166 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-13729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack. CVE-2017-13729...

Linux Distros Unpatched Vulnerability : CVE-2017-5446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read when an HTTP/2 connection to a servers sends DATA frames with incorrect data content. This leads to a potentially exploitable crash. This...

Linux Distros Unpatched Vulnerability : CVE-2017-5528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting XSS and cross-site request...

Linux Distros Unpatched Vulnerability : CVE-2017-13030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. CVE-2017-13030 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2017-9182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service use-after-free and invalid heap read, related to the GETCOLOR function i...

Linux Distros Unpatched Vulnerability : CVE-2017-9619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xpstruecallbackglyphname function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service Segmentation...

Linux Distros Unpatched Vulnerability : CVE-2017-11542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c. CVE-2017-11542 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2017-17810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14rc0, there is a SEGV on unknown address that will cause a remote denial of service attack, because asm/preproc.c mishandles macro...

Linux Distros Unpatched Vulnerability : CVE-2017-7975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2buildhuffmantable function in jbig2huffman...