21 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-27064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memory leak in nftablesupdchain If nftnetdevregisterhooks fails,...
SUSE-SU-2025:02449-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506002322 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. - CVE-2024-53173:...
Alibaba Cloud Linux 3 : 0102: freeglut (ALINUX3-SA-2024:0102)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0102 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-24258: freeglut 3.4.0 was...
Oracle Linux 7 : libxslt (ELSA-2025-3612)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3612 advisory. - Fix CVE-2024-55549 issue due to memory leak Orabug: 37795485 Tenable has extracted the preceding description block directly from the Oracle Linux...
Amazon Linux 2 : kernel (ALAS-2025-2800)
The version of kernel installed on the remote host is prior to 4.14.355-275.603. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2800 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2reconnectserver...
Linux Distros Unpatched Vulnerability : CVE-2024-56775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the...
Linux Distros Unpatched Vulnerability : CVE-2023-45666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. It may look like stbiloadgifmain doesn't give guarantees about the content of output value...
Linux Distros Unpatched Vulnerability : CVE-2021-47237
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hamradio: fix memory leak in mkissclose My local syzbot instance hit memory leak in mkissopen1. The problem was in missing freenetdev in mkissclose. In...
Linux Distros Unpatched Vulnerability : CVE-2021-47365
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afs: Fix page leak There's a loop in afsextendwriteback that adds extra pages to a write we...
Linux Distros Unpatched Vulnerability : CVE-2023-7192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak problem was found in ctnetlinkcreateconntrack in net/netfilter/nfconntracknetlink.c in the Linux Kernel. This issue may allow a local attacker wit...
ALSA-2025:1611 Important: nodejs:22 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083...
[SECURITY] [DLA 4033-1] libtar security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4033-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 28, 2025 https://wiki.debian.org/LTS -...
SUSE-SU-2024:4249-1 Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122216 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273. - CVE-2024-35863: Fixed...
SUSE-SU-2021:14724-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3483: Fixed a use-after-free in nosy.c bsc1184393. - CVE-2021-30002: Fixed a memory leak for large arguments in videousercopy bsc1184120. -...
SUSE-SU-2020:2107-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. bsc1173573 - CVE-2020-15393: Fixed a memory leak in...
SUSE-SU-2019:2785-2 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 - CVE-2019-15141: Fixed a divide-by-zero...
SUSE-SU-2018:1129-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - security update png.c CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. Attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. bsc1086773 CVE-2018-10177: there i...
SUSE-SU-2018:0017-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - security update xcf.c: CVE-2017-14343: Memory leak vulnerability in ReadXCFImage could lead to denial of service via a crafted file. CVE-2017-12691: The ReadOneLayer function in coders/xcf.c allows remote attackers to cause a denial of...
SUSE-SU-2017:1489-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...
SUSE-SU-2016:1783-1 Security update for GraphicsMagick
GraphicsMagick was updated to fix 37 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9813: Crash on corrupted viff file bsc984035. - CVE-2014-9814: NULL pointer dereference in...