Linux Distros Unpatched Vulnerability : CVE-2016-8680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfgetabbrevforcode function in dwarfutil.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service out-of-bounds read by...

Linux Distros Unpatched Vulnerability : CVE-2021-28216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. CVE-2021-28216 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2014-7204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service infinite loop and CPU and disk consumption via a crafted JavaScript file...

Linux Distros Unpatched Vulnerability : CVE-2015-4116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the splptrheapinsert function in ext/spl/splheap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execu...

Linux Distros Unpatched Vulnerability : CVE-2019-13636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. CVE-2019-13636 Note...

Linux Distros Unpatched Vulnerability : CVE-2020-27801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. CVE-2020-27801 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2015-8777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechani...

Linux Distros Unpatched Vulnerability : CVE-2017-7551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on...

Linux Distros Unpatched Vulnerability : CVE-2020-27511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS...

Linux Distros Unpatched Vulnerability : CVE-2017-17815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of...

Linux Distros Unpatched Vulnerability : CVE-2017-14977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table...

Linux Distros Unpatched Vulnerability : CVE-2015-1196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. CVE-2015-1196 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2020-12825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption. CVE-2020-12825 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2017-7611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checksymtabshndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application...

Linux Distros Unpatched Vulnerability : CVE-2017-14858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2021-26220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. CVE-2021-26220 Note that...

Linux Distros Unpatched Vulnerability : CVE-2016-10197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service out-of-bounds read via an empty hostname...

Linux Distros Unpatched Vulnerability : CVE-2019-14662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Brandy 1.20.1 has a stack-based buffer overflow in fileioopenout in fileio.c via crafted BASIC source code. CVE-2019-14662 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2014-3243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption...

Linux Distros Unpatched Vulnerability : CVE-2017-9353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet- ipv6.c by validating an IPv6 address. CVE-2017-9353...