Linux Distros Unpatched Vulnerability : CVE-2016-4983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files. CVE-2016-4983 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-14977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table...

Linux Distros Unpatched Vulnerability : CVE-2020-11721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - loadpng in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-19416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in sysstat 12.1.1. The remapstruct function in sacommon.c has an out-of-bounds read during a memmove call, as demonstrated by sadf...

Linux Distros Unpatched Vulnerability : CVE-2015-1196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. CVE-2015-1196 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2017-17942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c. CVE-2017-17942 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2021-28021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2016-7136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross- site scripting XSS attacks via a crafted GET request...

Linux Distros Unpatched Vulnerability : CVE-2020-27511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS...

Linux Distros Unpatched Vulnerability : CVE-2018-17097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service double free or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2018-12264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

Linux Distros Unpatched Vulnerability : CVE-2020-16300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability in tiff12printpage in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2021-26221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. CVE-2021-26221 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-7437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function. CVE-2018-7437 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2020-16135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. CVE-2020-16135 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2020-21533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fig2dev 3.2.7b contains a stack buffer overflow in the readtextobject function in read.c. CVE-2020-21533 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2019-5719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling th...

Linux Distros Unpatched Vulnerability : CVE-2017-6436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2012-1586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which...

Linux Distros Unpatched Vulnerability : CVE-2017-12616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resourc...