Linux Distros Unpatched Vulnerability : CVE-2022-48620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number. CVE-2022-48620 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-25255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not fou...

Linux Distros Unpatched Vulnerability : CVE-2024-38608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix netif state handling mlx5esuspend cleans resources only if netifdevicepresent returns true. However, mlx5eresume changes the state of netif, via...

Linux Distros Unpatched Vulnerability : CVE-2021-44501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to...

Linux Distros Unpatched Vulnerability : CVE-2022-48844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix leaking sentcmd skb sentcmd memory is not freed before freeing hcide...

Linux Distros Unpatched Vulnerability : CVE-2022-45885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbfrontend.c has a race condition that can cause a use-after-free when a devi...

Linux Distros Unpatched Vulnerability : CVE-2023-31670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a...

Linux Distros Unpatched Vulnerability : CVE-2023-28464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and...

Linux Distros Unpatched Vulnerability : CVE-2021-32056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and...

Linux Distros Unpatched Vulnerability : CVE-2024-40866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

Linux Distros Unpatched Vulnerability : CVE-2022-37967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-37967 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-27418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tcpreplay v4.4.1 has a heap-based buffer overflow in dochecksummath at /tcpedit/checksum.c. CVE-2022-27418 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2024-25111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked...

Linux Distros Unpatched Vulnerability : CVE-2024-38581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpumes.c CVE-2024-38581 Note that...

Linux Distros Unpatched Vulnerability : CVE-2012-5515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 XENMEMdecreasereservation, 2 XENMEMpopulatephysmap, and 3 XENMEMexchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-9060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...

Linux Distros Unpatched Vulnerability : CVE-2016-6322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deploy...

Linux Distros Unpatched Vulnerability : CVE-2017-11464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect...

Linux Distros Unpatched Vulnerability : CVE-2014-3566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle...

Linux Distros Unpatched Vulnerability : CVE-2020-14093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. CVE-2020-14093 Note that Nessus relies on the presence of the...