Linux Distros Unpatched Vulnerability : CVE-2023-25435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits at /libtiff/tools/tiffcrop.c:3753. CVE-2023-25435 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2024-46731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mcdata when i = 0. CVE-2024-46731 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-43666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

Linux Distros Unpatched Vulnerability : CVE-2022-27942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parsempls in common/get.c. CVE-2022-27942 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2022-43680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situation...

Linux Distros Unpatched Vulnerability : CVE-2022-49544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipw2x00: Fix potential NULL dereference in libipwxmit crypt and crypt-ops could be null, so we need to checking null before dereference CVE-2022-49544 Note that...

Linux Distros Unpatched Vulnerability : CVE-2024-46727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...

Linux Distros Unpatched Vulnerability : CVE-2024-24968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local...

Linux Distros Unpatched Vulnerability : CVE-2021-38578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. CVE-2021-38578 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-49222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of EDID block can be long...

Linux Distros Unpatched Vulnerability : CVE-2023-3978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...

Linux Distros Unpatched Vulnerability : CVE-2023-33288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190remove in drivers/power/supply/bq24190charger.c. It could allow a...

Linux Distros Unpatched Vulnerability : CVE-2023-37766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so. CVE-2023-3776...

Linux Distros Unpatched Vulnerability : CVE-2022-49629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthopcompatmode. While reading nexthopcompatmode, it can be...

Linux Distros Unpatched Vulnerability : CVE-2024-32493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID...

Linux Distros Unpatched Vulnerability : CVE-2023-28866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally inval...

Linux Distros Unpatched Vulnerability : CVE-2023-4756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. CVE-2023-4756 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2021-42613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free in cleanupindex in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2023-22665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute...

Linux Distros Unpatched Vulnerability : CVE-2024-0811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension...