Linux Distros Unpatched Vulnerability : CVE-2018-19890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-21723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause ...

Linux Distros Unpatched Vulnerability : CVE-2020-21468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released...

Linux Distros Unpatched Vulnerability : CVE-2019-19962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography. CVE-2019-19962 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-46363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbig2enc v0.28 was discovered to contain a SEGV via jbig2addpage in src/jbig2enc.cc:512. CVE-2023-46363 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2020-24999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml...

Linux Distros Unpatched Vulnerability : CVE-2023-27115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::catcomputesize. CVE-2023-27115 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-32325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. CVE-2022-32325 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2021-40567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of...

Linux Distros Unpatched Vulnerability : CVE-2022-42961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operation...

Linux Distros Unpatched Vulnerability : CVE-2022-38235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc. CVE-2022-38235 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2025-31176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash. CVE-2025-31176 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-46331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange, which lead to segmentation fault. CVE-2023-46331 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2022-35473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7. CVE-2022-35473 Note that Nessus relies on the presence of...

GHSA-9Q78-27F3-2JMH webp crate may expose memory contents when encoding an image

Affected versions of this crate did not check that the input slice passed to "webp::Encoder::encode is large enough for the specified image dimensions. If the input slice is too short, the library will read out of bounds of the buffer and encode other memory contents as an image, resulting in...

CVE-2025-54080 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

CVE-2025-54080 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

CVE-2025-54080

CVE-2025-54080 (Exiv2) is an out-of-bounds read vulnerability in Exiv2 up to version 0.28.5 that is triggered when writing metadata to a crafted image. The issue can cause a denial of service by crashing Exiv2, when a user runs the tool on a manipulated image file. The root cause is an out-of-bou...

GHSA-496F-X7CQ-CQ39 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Impact An out-of-bounds read was found in Exiv2 versions v0.28.5 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image...

Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45913: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45919: Buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45922: Segmentation violation in glXGetDrawableAttribute bsc1222042. Patch...