Linux Distros Unpatched Vulnerability : CVE-2023-2840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. CVE-2023-2840 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-49279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the len sizeofp operati...

Linux Distros Unpatched Vulnerability : CVE-2021-3575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420torgb when decompressing a crafted .j2k file. An attacker could use this to execu...

Linux Distros Unpatched Vulnerability : CVE-2022-21125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via...

Linux Distros Unpatched Vulnerability : CVE-2022-49216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/tegra: Fix reference leak in tegradsigangedprobe The reference taken by 'offinddevicebynode' must be released when not needed anymore. Add putdevice call to...

Linux Distros Unpatched Vulnerability : CVE-2022-22909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the na...

Linux Distros Unpatched Vulnerability : CVE-2023-36193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c. CVE-2023-36193 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-1436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads...

Linux Distros Unpatched Vulnerability : CVE-2021-38166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucke...

Linux Distros Unpatched Vulnerability : CVE-2024-24785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template...

Linux Distros Unpatched Vulnerability : CVE-2020-24394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.7.8, fs/nfsd/vfs.c in the NFS server can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support,...

Linux Distros Unpatched Vulnerability : CVE-2022-29526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could...

Linux Distros Unpatched Vulnerability : CVE-2023-52426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2022-48345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities. CVE-2022-48345 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-28048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac. CVE-2022-28048 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-48806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 i2c: i801: Don't silently correct invalid transfer size revealed that ee1004eepromread d...

Linux Distros Unpatched Vulnerability : CVE-2022-4122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2024-35862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isnetworknamedeleted Skip sessions that are being tear...

Linux Distros Unpatched Vulnerability : CVE-2024-1062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr. CVE-2024-1062...

Linux Distros Unpatched Vulnerability : CVE-2021-47308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in fcrportprliresp. CVE-2021-47308 Note that Nessus relies on the...