Linux Distros Unpatched Vulnerability : CVE-2017-9192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- tga.c:528:7. CVE-2017-9192 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2015-8380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-20748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete...

Linux Distros Unpatched Vulnerability : CVE-2017-18017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tcpmssmanglepacket function in net/netfilter/xtTCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2017-8398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes...

Linux Distros Unpatched Vulnerability : CVE-2014-9087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a craft...

Linux Distros Unpatched Vulnerability : CVE-2017-5836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The plistfreedata function in plist.c in libplist allows attackers to cause a denial of service crash via vectors involving an integer node that is treated as a...

Linux Distros Unpatched Vulnerability : CVE-2017-5048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to...

Linux Distros Unpatched Vulnerability : CVE-2020-11945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise...

Linux Distros Unpatched Vulnerability : CVE-2019-14665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Brandy 1.20.1 has a heap-based buffer overflow in definearray in variables.c via crafted BASIC source code. CVE-2019-14665 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2014-1585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 do...

Linux Distros Unpatched Vulnerability : CVE-2018-7549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. CVE-2018-7549 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2017-12665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. CVE-2017-12665 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-11176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a...

Linux Distros Unpatched Vulnerability : CVE-2015-5186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Audit before 2.4.4 in Linux does not sanitize escape characters in filenames. CVE-2015-5186 Note that Nessus relies on the presence of the package as reported b...

Linux Distros Unpatched Vulnerability : CVE-2019-12483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in...

Linux Distros Unpatched Vulnerability : CVE-2021-23840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the...

Linux Distros Unpatched Vulnerability : CVE-2014-8167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man- in-the-middle attack CVE-2014-8167 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2016-6341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oVirt Engine before 4.0.3 does not include DWHDBPASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password...

Linux Distros Unpatched Vulnerability : CVE-2016-5483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE...