3163 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-7076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a use...
Linux Distros Unpatched Vulnerability : CVE-2020-16156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Nessus relies on the presence of the package as reported by the vendor. C Tenable, Inc...
Linux Distros Unpatched Vulnerability : CVE-2020-27801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. CVE-2020-27801 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2020-28407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as...
Linux Distros Unpatched Vulnerability : CVE-2017-14249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c,...
Linux Distros Unpatched Vulnerability : CVE-2017-18184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iteraterc4 in QPDFencryption.cc. CVE-2017-18184 Note tha...
Linux Distros Unpatched Vulnerability : CVE-2015-3253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial o...
Linux Distros Unpatched Vulnerability : CVE-2017-14519
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp,...
Linux Distros Unpatched Vulnerability : CVE-2013-2027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via...
Linux Distros Unpatched Vulnerability : CVE-2018-14461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint. CVE-2018-14461 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2017-13005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter. CVE-2017-13005 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2021-29507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GENIVI Diagnostic Log and Trace DLT provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the...
Linux Distros Unpatched Vulnerability : CVE-2019-9071
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in dcounttemplatesscopes in cp-demangle.c after...
Linux Distros Unpatched Vulnerability : CVE-2019-15165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. CVE-2019-15165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-1000061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or...
Linux Distros Unpatched Vulnerability : CVE-2015-0251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The moddavsvn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafte...
Linux Distros Unpatched Vulnerability : CVE-2019-19534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c drive...
Linux Distros Unpatched Vulnerability : CVE-2021-25635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then...
Linux Distros Unpatched Vulnerability : CVE-2018-16878
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS...
Linux Distros Unpatched Vulnerability : CVE-2017-11735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...