Linux Distros Unpatched Vulnerability : CVE-2022-45748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file...

Linux Distros Unpatched Vulnerability : CVE-2023-37765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfdumpvrmlsffield function at /lib/libgpac.so. CVE-2023-37765...

Linux Distros Unpatched Vulnerability : CVE-2022-49502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rga: fix possible memory leak in rgaprobe rga-m2mdev needs to be freed when rgaprobe fails. CVE-2022-49502 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-36141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context. CVE-2022-36141 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2021-37789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage.h 2.27 has a heap-based buffer over in stbijpegload, leading to Information Disclosure or Denial of Service. CVE-2021-37789 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2022-48538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as...

Linux Distros Unpatched Vulnerability : CVE-2021-44505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a NULL pointer dereference aft...

Linux Distros Unpatched Vulnerability : CVE-2024-47855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. CVE-2024-47855 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-25434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes at /libtiff/tools/tiffcrop.c:3215. CVE-2023-25434 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-41043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. CVE-2021-41043 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2023-52612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req-dst buffer overflow The req-dst buffer size should be checked before...

Linux Distros Unpatched Vulnerability : CVE-2021-38187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a u8 to a u64. CVE-2021-38187 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2022-49628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix leaks in probe These two error paths should clean up before returning...

Linux Distros Unpatched Vulnerability : CVE-2021-45960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating t...

Linux Distros Unpatched Vulnerability : CVE-2023-45862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/usb/storage/eneub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend...

Linux Distros Unpatched Vulnerability : CVE-2022-4964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set. CVE-2022-4964 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-49362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsdfileput nfsdfileputnoref can free @nf, so don't...

Linux Distros Unpatched Vulnerability : CVE-2024-35845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwlfwinidebuginfotlv is used as a string,...

Linux Distros Unpatched Vulnerability : CVE-2022-2588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the clsroute filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle...

Linux Distros Unpatched Vulnerability : CVE-2023-26917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lyspstmtvalidatevalue at lysparsemem.c. CVE-2023-26917 No...