Linux Distros Unpatched Vulnerability : CVE-2024-37894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptib...

Linux Distros Unpatched Vulnerability : CVE-2022-48692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd-result only when scmnd is not NULL This change fixes the following kerne...

Linux Distros Unpatched Vulnerability : CVE-2023-52354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted. CVE-2023-52354 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-29456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components...

Linux Distros Unpatched Vulnerability : CVE-2021-47116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix memory leak in ext4mbinitbackend on error path. Fix a memory leak discovered by syzbot when a file system is corrupted with an illegally large...

Linux Distros Unpatched Vulnerability : CVE-2023-52629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code puts flushwork before timershutdownsync in switchdrvremove. Although w...

Linux Distros Unpatched Vulnerability : CVE-2021-47601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointe...

Linux Distros Unpatched Vulnerability : CVE-2023-31612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the dfeqexplist component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Linux Distros Unpatched Vulnerability : CVE-2021-32440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MediaRewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Linux Distros Unpatched Vulnerability : CVE-2021-32135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

Linux Distros Unpatched Vulnerability : CVE-2023-52589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rkisp1: Fix IRQ disable race issue In rkisp1ispstop and rkisp1csidisable the driver masks the interrupts and then apparently assumes that the interrupt...

Linux Distros Unpatched Vulnerability : CVE-2021-47438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix memory leak in mlx5coredestroycq error path Prior to this patch in case mlx5coredestroycq failed it returns without completing all destroy...

Linux Distros Unpatched Vulnerability : CVE-2022-2058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from...

Linux Distros Unpatched Vulnerability : CVE-2020-24025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...

Linux Distros Unpatched Vulnerability : CVE-2024-42459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can...

Linux Distros Unpatched Vulnerability : CVE-2023-23000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegraxusbfindportnode return value. Callers expect NULL in the error case, but an error...

Linux Distros Unpatched Vulnerability : CVE-2022-39047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL. CVE-2022-39047...

Linux Distros Unpatched Vulnerability : CVE-2023-3896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 CVE-2023-3896 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2024-27758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote...

Linux Distros Unpatched Vulnerability : CVE-2024-43861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: qmiwwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive. CVE-2024-43861 Note that Nessus relies on the presence of...