Linux Distros Unpatched Vulnerability : CVE-2020-3902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for...

Linux Distros Unpatched Vulnerability : CVE-2023-46930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gfisomfindodidfortrack /afltest/gpac/src/isomedia/mediaodf.c:522:14. CVE-2023-46930 Note...

Linux Distros Unpatched Vulnerability : CVE-2024-35784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remove extent locking I got a lockdep splat with fiemap and pagefaulting wit...

Linux Distros Unpatched Vulnerability : CVE-2023-39368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via...

Linux Distros Unpatched Vulnerability : CVE-2023-34320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cortex-A77 cores r0p0 and r1p0 are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either...

Linux Distros Unpatched Vulnerability : CVE-2022-0485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the...

Linux Distros Unpatched Vulnerability : CVE-2023-24537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer...

Linux Distros Unpatched Vulnerability : CVE-2022-28131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply...

Linux Distros Unpatched Vulnerability : CVE-2021-46020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash. CVE-2021-46020 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2024-36463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of atob in Zabbix JS allows to create a string with arbitrary content and use it to access internal properties of objects. CVE-2024-36463 Not...

Linux Distros Unpatched Vulnerability : CVE-2023-6606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash th...

Linux Distros Unpatched Vulnerability : CVE-2024-33883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection. CVE-2024-33883 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-39742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. CVE-2023-39742 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2022-2287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2287 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2023-52528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit- value access issue:...

Linux Distros Unpatched Vulnerability : CVE-2023-38575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information...

Linux Distros Unpatched Vulnerability : CVE-2022-49258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccree - Fix use after free in cccipherexit kfreesensitivectxp-user.key will free the ctxp-user.key. But ctxp-user.key is still used in the next line,...

Linux Distros Unpatched Vulnerability : CVE-2023-43374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the idutentelog parameter at /hoteldruid/personalizza.php. CVE-2023-43374 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2023-4156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2022-45907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. CVE-2022-45907 Note that...