1905 matches found
Linux Distros Unpatched Vulnerability : CVE-2015-8763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted 1 commit or 2 confirm message, which trigger...
Linux Distros Unpatched Vulnerability : CVE-2017-2581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code...
Linux Distros Unpatched Vulnerability : CVE-2017-13689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint. CVE-2017-13689 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2014-9675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discove...
Linux Distros Unpatched Vulnerability : CVE-2013-7440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ssl.matchhostname function in CPython aka Python before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow...
Linux Distros Unpatched Vulnerability : CVE-2017-13685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dumpcallback function in SQLite 3.20.0 allows remote attackers to cause a denial of service EXCBADACCESS and application crash via a crafted file...
Linux Distros Unpatched Vulnerability : CVE-2014-9838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service crash. CVE-2014-9838 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2017-17669
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunkint.cpp in Exiv2 0.26. A crafted PNG file will lead to ...
Linux Distros Unpatched Vulnerability : CVE-2017-12876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file. CVE-2017-12876 No...
Linux Distros Unpatched Vulnerability : CVE-2020-35738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties clai...
Linux Distros Unpatched Vulnerability : CVE-2017-10918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka...
Linux Distros Unpatched Vulnerability : CVE-2017-11533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...
Linux Distros Unpatched Vulnerability : CVE-2017-13015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint. CVE-2017-13015 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-9169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:355:25. CVE-2017-9169 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2020-21533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fig2dev 3.2.7b contains a stack buffer overflow in the readtextobject function in read.c. CVE-2020-21533 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2014-3575
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org OOo might allow remote attackers to embed arbitrary data into documents via...
Linux Distros Unpatched Vulnerability : CVE-2019-12855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM...
Linux Distros Unpatched Vulnerability : CVE-2018-7435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-7435 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2019-5719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling th...
Linux Distros Unpatched Vulnerability : CVE-2015-8558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via...