Linux Distros Unpatched Vulnerability : CVE-2017-6348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2017-6350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow at an unserializeuep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree leng...

Linux Distros Unpatched Vulnerability : CVE-2017-7524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...

Linux Distros Unpatched Vulnerability : CVE-2017-6014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a...

Linux Distros Unpatched Vulnerability : CVE-2017-5464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2017-5978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted ZIP...

Linux Distros Unpatched Vulnerability : CVE-2017-5884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y...

Linux Distros Unpatched Vulnerability : CVE-2017-7396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 CConnection.cxx CConnection::CConnection, an unauthenticated client can cause a small memory leak in the server. CVE-2017-7396 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2017-7392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt, an unauthenticated client can cause a small memory leak in the server. CVE-2017-73...

Linux Distros Unpatched Vulnerability : CVE-2017-7395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server. CVE-2017-7395 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-7394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 SSecurityPlain.cxx SSecurityPlain::processMsg, unauthenticated users can crash the server by sending long usernames. CVE-2017-7394 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-7226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer...

Linux Distros Unpatched Vulnerability : CVE-2017-7303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 because of missing a check in...

Linux Distros Unpatched Vulnerability : CVE-2017-7301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an aoutlinkaddsymbols function in bfd/aoutx.h that has an off-by-one...

Linux Distros Unpatched Vulnerability : CVE-2017-5483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse. CVE-2017-5483 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-5466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a page is loaded from an original site through a hyperlink and contains a redirect to a data:text/html URL, triggering a reload will run the reloaded...

Linux Distros Unpatched Vulnerability : CVE-2017-5460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentiall...

Linux Distros Unpatched Vulnerability : CVE-2017-5456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and...

Linux Distros Unpatched Vulnerability : CVE-2017-5446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read when an HTTP/2 connection to a servers sends DATA frames with incorrect data content. This leads to a potentially exploitable crash. This...

Linux Distros Unpatched Vulnerability : CVE-2017-5447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to...