63838 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-12875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service CPU consumption via a crafted file. CVE-2017-1287...
Linux Distros Unpatched Vulnerability : CVE-2017-9617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion uncontrolled recursion in the dissectdaaponetag function in epan/dissectors/packet-daap.c...
Linux Distros Unpatched Vulnerability : CVE-2017-8362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service invalid read and application crash via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2017-12893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen. CVE-2017-12893 Note that Nessus relies on the presence of the package a...
Linux Distros Unpatched Vulnerability : CVE-2017-13134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cau...
Linux Distros Unpatched Vulnerability : CVE-2017-9611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read an...
Linux Distros Unpatched Vulnerability : CVE-2017-6836
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4,...
Linux Distros Unpatched Vulnerability : CVE-2017-9181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c...
Linux Distros Unpatched Vulnerability : CVE-2017-9226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read...
Linux Distros Unpatched Vulnerability : CVE-2017-13757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to...
Linux Distros Unpatched Vulnerability : CVE-2017-9165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11. CVE-2017-9165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-15033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. CVE-2017-15033 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-13036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3. CVE-2017-13036 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2017-8348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8348 Note that...
Linux Distros Unpatched Vulnerability : CVE-2017-1000380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read...
Linux Distros Unpatched Vulnerability : CVE-2017-7596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.0.7 has an outside the range of representable values of type float undefined behavior issue, which might allow remote attackers to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2017-1000061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or...
Linux Distros Unpatched Vulnerability : CVE-2017-16845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out- of-bounds access. CVE-2017-16845 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2017-10966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick whi...
Linux Distros Unpatched Vulnerability : CVE-2017-2839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge...