Linux Distros Unpatched Vulnerability : CVE-2014-4653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local...

Linux Distros Unpatched Vulnerability : CVE-2014-9812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file. CVE-2014-9812 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2014-9710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows...

Linux Distros Unpatched Vulnerability : CVE-2014-0067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The make check command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a...

Linux Distros Unpatched Vulnerability : CVE-2014-7904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other...

Linux Distros Unpatched Vulnerability : CVE-2014-9087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a craft...

Linux Distros Unpatched Vulnerability : CVE-2014-9114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2014-8155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a...

Linux Distros Unpatched Vulnerability : CVE-2014-3528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials,...

Linux Distros Unpatched Vulnerability : CVE-2014-3565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNM...

Linux Distros Unpatched Vulnerability : CVE-2014-8179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during ...

Linux Distros Unpatched Vulnerability : CVE-2014-9809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image. CVE-2014-9809 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2014-9496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which...

Linux Distros Unpatched Vulnerability : CVE-2014-9907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. CVE-2014-9907 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2014-9654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculate...

Linux Distros Unpatched Vulnerability : CVE-2014-8767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the olsrprint function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service crash via...

Linux Distros Unpatched Vulnerability : CVE-2014-0021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Chrony before 1.29.1 has traffic amplification in cmdmon protocol CVE-2014-0021 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2014-8240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size...

Linux Distros Unpatched Vulnerability : CVE-2014-1331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory...

Linux Distros Unpatched Vulnerability : CVE-2014-0249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The System Security Services Daemon SSSD 1.11.6 does not properly identify group membership when a non- POSIX group is in a group membership chain, which allows...