Linux Distros Unpatched Vulnerability : CVE-2024-47515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allow...

Linux Distros Unpatched Vulnerability : CVE-2023-39810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. CVE-2023-39810 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2023-52640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Fix oob in ntfslistxattr The length of name cannot exceed the space occupied by ea. CVE-2023-52640 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-45907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. CVE-2022-45907 Note that...

Linux Distros Unpatched Vulnerability : CVE-2023-52885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svctcplistendataready After the listener svcsock is freed, and before...

Linux Distros Unpatched Vulnerability : CVE-2022-2581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. CVE-2022-2581 Note that Nessus relies on the presence of the package as reported by the vendo...

Linux Distros Unpatched Vulnerability : CVE-2023-52528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit- value access issue:...

Linux Distros Unpatched Vulnerability : CVE-2022-30790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552. CVE-2022-30790 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2023-26769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability found in Liblouis LouTrace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at...

Linux Distros Unpatched Vulnerability : CVE-2022-28042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode. CVE-2022-28042 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-2953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file...

Linux Distros Unpatched Vulnerability : CVE-2024-37894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptib...

Linux Distros Unpatched Vulnerability : CVE-2022-48692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd-result only when scmnd is not NULL This change fixes the following kerne...

Linux Distros Unpatched Vulnerability : CVE-2022-49258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccree - Fix use after free in cccipherexit kfreesensitivectxp-user.key will free the ctxp-user.key. But ctxp-user.key is still used in the next line,...

Linux Distros Unpatched Vulnerability : CVE-2024-47855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. CVE-2024-47855 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2021-3826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service segmentation fault...

Linux Distros Unpatched Vulnerability : CVE-2022-25883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is...

Linux Distros Unpatched Vulnerability : CVE-2024-1284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2024-21890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example:...

Linux Distros Unpatched Vulnerability : CVE-2023-29934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect. CVE-2023-29934 Note that Nessus relies on t...