Linux Distros Unpatched Vulnerability : CVE-2018-14628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could...

Linux Distros Unpatched Vulnerability : CVE-2014-9839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds access. CVE-2014-9839 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2020-28949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ArchiveTar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack such as file:// to overwrite file...

Linux Distros Unpatched Vulnerability : CVE-2015-8897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2016-5042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfgetarangeslist function in libdwarf before 20160923 allows remote attackers to cause a denial of service infinite loop and crash via a crafted DWARF...

Linux Distros Unpatched Vulnerability : CVE-2017-13055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print- isoclns.c:isisprintisreachsubtlv. CVE-2017-13055 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2014-9851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service application crash. CVE-2014-9851 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2015-5219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2017-1000229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service. CVE-2017-1000229 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-13133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory...

Linux Distros Unpatched Vulnerability : CVE-2020-15306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize in...

Linux Distros Unpatched Vulnerability : CVE-2016-5035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfreadlinetableheader function in dwarflinetablereader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2015-8558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via...

Linux Distros Unpatched Vulnerability : CVE-2017-14520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF...

Linux Distros Unpatched Vulnerability : CVE-2012-2132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass...

Linux Distros Unpatched Vulnerability : CVE-2017-7209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dumpsectionasbytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program...

Linux Distros Unpatched Vulnerability : CVE-2017-7226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer...

Linux Distros Unpatched Vulnerability : CVE-2018-19539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in JasPer 2.0.14. There is an access violation in the function jasimagereadcmpt in libjasper/base/jasimage.c, leading to a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-3167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the apgetbasicauthpw by third- party modules outside of the authentication phase may lead to...

Linux Distros Unpatched Vulnerability : CVE-2017-18210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocati...