Linux Distros Unpatched Vulnerability : CVE-2022-49362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsdfileput nfsdfileputnoref can free @nf, so don't...

Linux Distros Unpatched Vulnerability : CVE-2024-35845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwlfwinidebuginfotlv is used as a string,...

Linux Distros Unpatched Vulnerability : CVE-2023-3316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in TIFFClose is caused by a failure to open an output file non-existent path or a path that requires permissions like /dev/null while...

Linux Distros Unpatched Vulnerability : CVE-2022-2598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. CVE-2022-2598 Note that Nessus relies on the presence of the package as reported by t...

Linux Distros Unpatched Vulnerability : CVE-2022-29806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to...

Linux Distros Unpatched Vulnerability : CVE-2023-0225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any...

Linux Distros Unpatched Vulnerability : CVE-2024-0809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2022-3099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository vim/vim prior to 9.0.0360. CVE-2022-3099 Note that Nessus relies on the presence of the package as reported by the vendor. C...

Linux Distros Unpatched Vulnerability : CVE-2021-32142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in...

Linux Distros Unpatched Vulnerability : CVE-2020-25792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair...

Linux Distros Unpatched Vulnerability : CVE-2023-29323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort up...

Linux Distros Unpatched Vulnerability : CVE-2022-36141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context. CVE-2022-36141 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-33883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection. CVE-2024-33883 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-30047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. CVE-2021-30047 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2018-21269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink...

Linux Distros Unpatched Vulnerability : CVE-2015-7805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file...

Linux Distros Unpatched Vulnerability : CVE-2017-15873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

Linux Distros Unpatched Vulnerability : CVE-2019-19534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c drive...

Linux Distros Unpatched Vulnerability : CVE-2017-15228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string. CVE-2017-15228 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-5499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in libjasper/jpc/jpcdec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file. CVE-2017-5499 Note...