Linux Distros Unpatched Vulnerability : CVE-2022-39047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL. CVE-2022-39047...

Linux Distros Unpatched Vulnerability : CVE-2021-44923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfdumpvrmldynfield.isra function, which causes a segmentation fault and application crash...

Linux Distros Unpatched Vulnerability : CVE-2023-3896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 CVE-2023-3896 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-24615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be...

Linux Distros Unpatched Vulnerability : CVE-2022-0235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor CVE-2022-0235 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-34508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message. CVE-2024-34508 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2021-44925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfsvggetattributename function, which causes a segmentation fault and application crash...

Linux Distros Unpatched Vulnerability : CVE-2023-39976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. CVE-2023-39976 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-48340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dhtsetxattrmdscbk use- after-free. CVE-2022-48340 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-3497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. CVE-2021-3497 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-38448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used. CVE-2024-3844...

Linux Distros Unpatched Vulnerability : CVE-2023-38426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2findcontextvals when createcontext's namelen is larger than the...

Linux Distros Unpatched Vulnerability : CVE-2020-25678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafa...

Linux Distros Unpatched Vulnerability : CVE-2024-43831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mediatek: vcodec: Handle invalid decoder vsi Handle an invalid decoder vsi in vpudecinit to ensure the decoder vsi is valid for future use. CVE-2024-4383...

Linux Distros Unpatched Vulnerability : CVE-2022-2380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfbread function. The vulnerability could result in...

Linux Distros Unpatched Vulnerability : CVE-2024-29214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in UEFI firmware CseVariableStorageSmm for some IntelR Processors may allow a privileged user to potentially enable escalation of...

Linux Distros Unpatched Vulnerability : CVE-2022-30790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552. CVE-2022-30790 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2024-32606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5toolsstrsprint in tools/lib/h5toolsstr.c called from h5toolsdumpsimpledata in...

Linux Distros Unpatched Vulnerability : CVE-2022-49639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be changed concurrently. So, we need to add READONCE to avoid data-races...

Linux Distros Unpatched Vulnerability : CVE-2022-49331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously allocated memory. Add devmkfree to those failure paths...