Linux Distros Unpatched Vulnerability : CVE-2014-9809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image. CVE-2014-9809 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2017-18198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2017-9405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-9405 Not...

Linux Distros Unpatched Vulnerability : CVE-2012-5564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - android-tools 4.1.1 in Android Debug Bridge ADB allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log. CVE-2012-5564 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-14859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault a...

Linux Distros Unpatched Vulnerability : CVE-2021-26221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. CVE-2021-26221 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-35521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

Linux Distros Unpatched Vulnerability : CVE-2015-4035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execut...

Linux Distros Unpatched Vulnerability : CVE-2017-8357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8357 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-1000407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel...

Linux Distros Unpatched Vulnerability : CVE-2015-9252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the...

Linux Distros Unpatched Vulnerability : CVE-2017-1000231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. CVE-2017-1000231 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2019-12387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

Linux Distros Unpatched Vulnerability : CVE-2017-15642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. CVE-2017-15642...

Linux Distros Unpatched Vulnerability : CVE-2015-3143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2019-14663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Brandy 1.20.1 has a stack-based buffer overflow in fileioopenin in fileio.c via crafted BASIC source code. CVE-2019-14663 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2015-5231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process...

Linux Distros Unpatched Vulnerability : CVE-2019-12067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd' is null...

Linux Distros Unpatched Vulnerability : CVE-2017-13022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute. CVE-2017-13022 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2020-16135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. CVE-2020-16135 Note that Nessus relies on the presence of the package ...