Linux Distros Unpatched Vulnerability : CVE-2017-5443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9,...

Linux Distros Unpatched Vulnerability : CVE-2017-11714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2017-9346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by...

Linux Distros Unpatched Vulnerability : CVE-2017-12183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute...

Linux Distros Unpatched Vulnerability : CVE-2017-13688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint. CVE-2017-13688 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2017-8925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The omninetopen function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service tty exhaustion by...

Linux Distros Unpatched Vulnerability : CVE-2017-5885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in the 1 vncconnectionservermessage and 2 vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-15286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false...

Linux Distros Unpatched Vulnerability : CVE-2017-6892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libsndfile version 1.0.28, an error in the aiffreadchanmap function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially...

Linux Distros Unpatched Vulnerability : CVE-2017-14608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker...

Linux Distros Unpatched Vulnerability : CVE-2017-12983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application...

Linux Distros Unpatched Vulnerability : CVE-2017-17084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARPMPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a...

Linux Distros Unpatched Vulnerability : CVE-2017-1000365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMITSTACK/RLIMINFINITY 1/4 of the size, but does not tak...

Linux Distros Unpatched Vulnerability : CVE-2017-11447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service. CVE-2017-11447 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2017-9110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. CVE-2017-9110 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2017-6951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keyringsearchaux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2017-6827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remo...

Linux Distros Unpatched Vulnerability : CVE-2017-8352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8352 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-11478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2017-9168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:353:25. CVE-2017-9168 Note that Nessus relies on t...