Linux Distros Unpatched Vulnerability : CVE-2013-1439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The faster LJPEG decoder in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2014-9512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. CVE-2014-9512 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2015-4042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service application cra...

Linux Distros Unpatched Vulnerability : CVE-2014-0222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service crash via a large L2 table i...

Linux Distros Unpatched Vulnerability : CVE-2020-16310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A division by zero vulnerability in dot24printpage in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2019-10901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file...

Linux Distros Unpatched Vulnerability : CVE-2019-10903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c...

Linux Distros Unpatched Vulnerability : CVE-2018-18873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function rasputdatastd in ras/rasenc.c. CVE-2018-18873 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2019-9638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in...

Linux Distros Unpatched Vulnerability : CVE-2020-27797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file. CVE-2020-27797 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2017-5951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The memgetbitsrectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2021-28902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In function readyincontainer in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

Linux Distros Unpatched Vulnerability : CVE-2018-20748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete...

Linux Distros Unpatched Vulnerability : CVE-2018-20623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the processarchive function in readelf.c via a crafted ELF...

Linux Distros Unpatched Vulnerability : CVE-2018-13871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FLblkmalloc in H5FL.c. CVE-2018-13871 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-15019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LAME 3.99.5 has a NULL Pointer Dereference in the hipdecodeinit function within libmp3lame/mpglibinterface.c via a malformed mpg file, because of an incorrect...

Linux Distros Unpatched Vulnerability : CVE-2019-20006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is...

Linux Distros Unpatched Vulnerability : CVE-2020-16024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a...

Linux Distros Unpatched Vulnerability : CVE-2021-28170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they...

Linux Distros Unpatched Vulnerability : CVE-2014-9639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, whic...