Linux Distros Unpatched Vulnerability : CVE-2017-9344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by...

Linux Distros Unpatched Vulnerability : CVE-2017-11543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpdump 4.9.0 has a buffer overflow in the sliplinkprint function in print-sl.c. CVE-2017-11543 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2017-9074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, whic...

Linux Distros Unpatched Vulnerability : CVE-2017-16611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as root, triggering tape rewinds, watchdogs, or...

Linux Distros Unpatched Vulnerability : CVE-2017-11550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash vi...

Linux Distros Unpatched Vulnerability : CVE-2017-16231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match in pcreexec.c because of a self-recursive call. NOTE:...

Linux Distros Unpatched Vulnerability : CVE-2017-9755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service buffe...

Linux Distros Unpatched Vulnerability : CVE-2017-11340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of servi...

Linux Distros Unpatched Vulnerability : CVE-2017-5849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2017-18029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2017-2988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitati...

Linux Distros Unpatched Vulnerability : CVE-2017-17085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating th...

Linux Distros Unpatched Vulnerability : CVE-2017-13133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory...

Linux Distros Unpatched Vulnerability : CVE-2017-1000229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service. CVE-2017-1000229 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-2997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizin...

Linux Distros Unpatched Vulnerability : CVE-2017-13013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. CVE-2017-13013 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2017-14326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-3636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.56 and earlier and 5.6.3...

Linux Distros Unpatched Vulnerability : CVE-2017-9158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadraw function in...

Linux Distros Unpatched Vulnerability : CVE-2017-18232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Serial Attached SCSI SAS implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of...