Linux Distros Unpatched Vulnerability : CVE-2020-16117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid e.g., minimal...

CVE-2025-21725 smb: client: fix oops due to unset link speed

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that NETWORKINTERFACEINFO::LinkSpeed will always be set by the server, so the client must handle any values and then prevent oopses like below from happening: Oops...

PT-2026-25616

CVE-2025-71264 Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service client crash. https://t.co/obMTVcktJe...

PT-2025-16241

Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where the soup message headers get content disposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a...

PT-2025-16249

Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash. Recommendations: At the moment, there i...

PT-2025-16248

Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where the soup auth digest authenticate function is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash. Recommendations:...

SUSE CVE-2024-10396

An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store garbage data in the audit log. Malformed ACLs provided in responses to client FetchACL RPCs can cause client processes to...

DEBIAN-CVE-2024-10396

An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store garbage data in the audit log. Malformed ACLs provided in responses to client FetchACL RPCs can cause client processes to...

SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2024:2631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2631-1 advisory. - CVE-2024-22211: Fixed integer overflow in freerdpbitmapplanarcontextreset that could lead to...

openSUSE Security Advisory (SUSE-SU-2024:2631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2631-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in freerdpbitmapplanarcontextreset that could lead to heap-buffer overflow bsc1219049 - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients bsc1223353 -...

kernel: smb: client: fix UAF in smb2_reconnect_server()

A flaw was found in the smb client in the Linux kernel. A potential use-after-free error was seen in the smb2reconnectserver function. This issue can lead to the crash of a client user session...

SUSE-SU-2024:1856-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...

SUSE-SU-2024:1835-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...

RHEL 7 : ppp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ppp: Remote client crash in ppp EAP-TLS patch CVE-2018-11574 - A vulnerability classified as problematic...

mutt: null pointer dereference

A null pointer dereference flaw was found in mutt when handling specially crafted characters. This issue could allow an attacker to send a specially crafted email that causes the email client to crash when reading or processing the email...

CVE-2024-4182

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status...

CVE-2024-2446

CVE-2024-2446 affects Mattermost server/mattermost-client components where there is no effective limit on the number of mentions processed per message. The description in connected sources specifies that Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x be...

PT-2024-20408 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 8.1.x through 8.1.9 Mattermost versions 9.2.x through 9.2.5 Mattermost versions 9.3.x through 9.3.1 Mattermost versions 9.4.x through 9.4.2 Description: The issue allows an authenticated attacker to crash the client...

Moonlight-common-c Security Vulnerability

Moonlight-common-c is the core GameStream client code shared between Moonlight clients. A security vulnerability exists in Moonlight-c that stems from vulnerability to buffer overflow, which could be exploited by an attacker to crash the client...