Linux Distros Unpatched Vulnerability : CVE-2017-11572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts parsettf.c resulting in DoS or code execution via a crafted otf file...

Linux Distros Unpatched Vulnerability : CVE-2019-17544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. CVE-2019-1754...

Linux Distros Unpatched Vulnerability : CVE-2017-9195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input- tga.c:620:27. CVE-2017-9195 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2017-13022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute. CVE-2017-13022 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2017-5563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

Linux Distros Unpatched Vulnerability : CVE-2017-11540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the...

Linux Distros Unpatched Vulnerability : CVE-2017-13045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint. CVE-2017-13045 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-11108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs i...

Linux Distros Unpatched Vulnerability : CVE-2017-13007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktapifprint. CVE-2017-13007 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2017-13042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print. CVE-2017-13042 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2017-13000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint. CVE-2017-13000 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-12897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint. CVE-2017-12897 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2017-13048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint. CVE-2017-13048 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2018-16403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarfgetabbrev in dwarfgetabbrev.c and dwarfhasattr in dwarfhasattr.c, leading to a...

Linux Distros Unpatched Vulnerability : CVE-2017-13015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint. CVE-2017-13015 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-13043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn. CVE-2017-13043 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2019-19204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH i...

Linux Distros Unpatched Vulnerability : CVE-2019-20005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to...

Linux Distros Unpatched Vulnerability : CVE-2018-7437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function. CVE-2018-7437 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-6969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashe...