17193 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt (UTSA-2025-002300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002300 advisory. Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2023-004048)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-004048 advisory. Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. Tenable has extracted th...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-002187)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002187 advisory. praecisparse in ntpd/refclockpalisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver. Tenabl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: byacc (UTSA-2023-000153)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000153 advisory. RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000543)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000543 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sssd (UTSA-2026-090441)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090441 advisory. A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire subcommands. This flaw allows an...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: byacc (UTSA-2023-000152)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000152 advisory. RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-054023)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054023 advisory. A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver-nwfilters mutex before iterating over...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000545)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000545 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000582)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000582 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. Tenable has extracted the preceding description block directly from the Unity Linux securi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-jdbc (UTSA-2023-002182)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002182 advisory. pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: protobuf-c (UTSA-2023-001305)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001305 advisory. protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. Tenable has extracted the preceding description block directly from the Unity Linux...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002720)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002720 advisory. Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. Tenable has extracted the preceding description block directly from the Unity Linux security...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-054035)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054035 advisory. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon. Tenable has extracted the preceding...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054042)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054042 advisory. An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulongname, causing an...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: amanda (UTSA-2023-002123)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002123 advisory. AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002329)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002329 advisory. Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. Tenable ha...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2023-002892)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002892 advisory. DISPUTED An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by th...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090639)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090639 advisory. In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to acce...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-sqlalchemy (UTSA-2026-090396)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090396 advisory. SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled. Tenable has extracted the preceding description block directly from the Unity Linux...