Linux Distros Unpatched Vulnerability : CVE-2017-3143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service bein...

Linux Distros Unpatched Vulnerability : CVE-2017-15105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prov...

Linux Distros Unpatched Vulnerability : CVE-2017-9349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a...

Linux Distros Unpatched Vulnerability : CVE-2017-14608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker...

Linux Distros Unpatched Vulnerability : CVE-2017-7613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service memo...

Linux Distros Unpatched Vulnerability : CVE-2017-6830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-15102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a...

Linux Distros Unpatched Vulnerability : CVE-2017-1000061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or...

Linux Distros Unpatched Vulnerability : CVE-2017-2839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge...

Linux Distros Unpatched Vulnerability : CVE-2017-11530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory...

Linux Distros Unpatched Vulnerability : CVE-2017-14224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution...

Linux Distros Unpatched Vulnerability : CVE-2017-5504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-18198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2017-13019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint. CVE-2017-13019 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-10966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick whi...

Linux Distros Unpatched Vulnerability : CVE-2017-6498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS. CVE-2017-6498 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2017-5980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a craft...

Linux Distros Unpatched Vulnerability : CVE-2017-17816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14rc0, there is a use-after-free in ppgetline in asm/preproc.c that will cause a remote denial of service attack. CVE-2017-17816 Not...

Linux Distros Unpatched Vulnerability : CVE-2017-8343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8343 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-6836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4,...