17193 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091341)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091341 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000378 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0490. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003819)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003819 advisory. Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded- headers to the origin server based on client side Connection header hop-by-hop mechanism. This ma...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000012)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000012 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-001601)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001601 advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000581)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000581 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Tenable has extracted the preceding description block directly from the Unity Linu...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090126)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090126 advisory. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gawk (UTSA-2023-002900)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002900 advisory. A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information. Tenable ha...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-001257)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001257 advisory. A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-091426)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091426 advisory. A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000586)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000586 advisory. Out-of-bounds Read in vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus h...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000605)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000605 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003828)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003828 advisory. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mdadm (UTSA-2023-002894)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002894 advisory. Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pixman (UTSA-2022-001002)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001002 advisory. In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kexec-tools (UTSA-2026-032932)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032932 advisory. A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091354)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091354 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000211)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000211 advisory. Use After Free in GitHub repository vim/vim prior to 8.2.4979. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ctags (UTSA-2023-002841)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002841 advisory. A flaw was found in Exuberant Ctags in the way it handles the -o option. This option specifies the tag filename. A crafted tag filename specified in the command line...