Linux Distros Unpatched Vulnerability : CVE-2021-40656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867. CVE-2021-40656 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-3134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository vim/vim prior to 9.0.0389. CVE-2022-3134 Note that Nessus relies on the presence of the package as reported by the vendor. C...

Linux Distros Unpatched Vulnerability : CVE-2023-0804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For user...

Linux Distros Unpatched Vulnerability : CVE-2021-43312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function...

Linux Distros Unpatched Vulnerability : CVE-2022-4645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that...

Linux Distros Unpatched Vulnerability : CVE-2021-44924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite loop vulnerability exists in gpac 1.1.0 in the gflog function, which causes a Denial of Service. CVE-2021-44924 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-22899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. CVE-2023-22899 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2020-36386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of- bounds read in hciextendedinquiryresultevt, aka...

Linux Distros Unpatched Vulnerability : CVE-2023-4156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2022-31783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by loutrace. CVE-2022-31783 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2023-33461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparsergetlongint which misses check NULL for function iniparsergetstring's return...

Linux Distros Unpatched Vulnerability : CVE-2022-43280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount. CVE-2022-43280 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2022-2286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2286 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-38900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. CVE-2022-38900 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2020-24330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid...

Linux Distros Unpatched Vulnerability : CVE-2021-43313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function...

Linux Distros Unpatched Vulnerability : CVE-2022-0240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mruby is vulnerable to NULL Pointer Dereference CVE-2022-0240 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

Linux Distros Unpatched Vulnerability : CVE-2020-25862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing...

Linux Distros Unpatched Vulnerability : CVE-2022-35206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function readanddisplayattrvalue in file dwarf.c. CVE-2022-35206 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2022-0696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 Note that Nessus relies on the presence of the package as reported by the...