Linux Distros Unpatched Vulnerability : CVE-2022-4337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. CVE-2022-4337 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2023-25434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes at /libtiff/tools/tiffcrop.c:3215. CVE-2023-25434 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-46489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gfisomboxparseex function at boxfuncs.c. CVE-2022-46489 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-36386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of- bounds read in hciextendedinquiryresultevt, aka...

Linux Distros Unpatched Vulnerability : CVE-2022-36145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord. CVE-2022-36145 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2022-2061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. CVE-2022-2061 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2023-22899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. CVE-2023-22899 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2022-0854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read random memory fro...

Linux Distros Unpatched Vulnerability : CVE-2023-52528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit- value access issue:...

Linux Distros Unpatched Vulnerability : CVE-2022-45907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. CVE-2022-45907 Note that...

Linux Distros Unpatched Vulnerability : CVE-2024-37891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to...

Linux Distros Unpatched Vulnerability : CVE-2023-52885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svctcplistendataready After the listener svcsock is freed, and before...

Linux Distros Unpatched Vulnerability : CVE-2022-33972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect calculation in microcode keying mechanism for some 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2022-30594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the...

Linux Distros Unpatched Vulnerability : CVE-2023-43374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the idutentelog parameter at /hoteldruid/personalizza.php. CVE-2023-43374 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2024-33876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 has a heap buffer overflow in H5Spointdeserialize in H5Spoint.c. CVE-2024-33876 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2022-0813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the...

Linux Distros Unpatched Vulnerability : CVE-2022-3108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.16-rc6. kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c lacks check of the return value of...

Linux Distros Unpatched Vulnerability : CVE-2023-4156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2024-33664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-jose through 3.3.0 allows attackers to cause a denial of service resource consumption during a decode via a crafted JSON Web Encryption JWE token with a...