Linux Distros Unpatched Vulnerability : CVE-2017-15232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. CVE-2017-15232 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2017-11147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter o...

Linux Distros Unpatched Vulnerability : CVE-2017-9111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2017-12992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint. CVE-2017-12992 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2017-10664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qemu-nbd in QEMU aka Quick Emulator does not ignore SIGPIPE, which allows remote attackers to cause a denial of service daemon crash by disconnecting during a...

Linux Distros Unpatched Vulnerability : CVE-2017-16831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2017-15281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service application crash or possibly have unspecified other...

Linux Distros Unpatched Vulnerability : CVE-2017-7612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checksysvhash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash...

Linux Distros Unpatched Vulnerability : CVE-2017-7619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL,...

Linux Distros Unpatched Vulnerability : CVE-2017-17689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL...

Linux Distros Unpatched Vulnerability : CVE-2017-10983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows DHCP - Read overflow when decoding option 63 and a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2017-13025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print- mobility.c:mobilityoptprint. CVE-2017-13025 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-12454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows...

Linux Distros Unpatched Vulnerability : CVE-2017-12897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint. CVE-2017-12897 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2017-14858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2017-13748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are lots of memory leaks in JasPer 2.0.12, triggered in the function jasstrdup in base/jasstring.c, that will lead to a remote denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2017-15721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative t...

Linux Distros Unpatched Vulnerability : CVE-2017-12664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. CVE-2017-12664 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-13021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print. CVE-2017-13021 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2017-2937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class...