Linux Distros Unpatched Vulnerability : CVE-2017-9773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the Null image driver. CVE-2017-9773 Note that Nessus relies on the presence of...

SUSE CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

DEBIAN-CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

UBUNTU-CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

Design/Logic Flaw

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...

CVE-2017-9773

CVE-2017-9773 affects Horde_Image (2.x up to 2.5.0); a crafted URL to the Null image driver could cause denial of service. Multiple connected advisories show fixes in Horde_Image 2.5.0 (and later 2.5.1) across distributions (e.g., Debian DSA-4276-1, Fedora updates). Remediation: upgrade to 2.5.0+...

pear-Horde_Image -- DoS vulnerability

Michael J Rubinsky reports: The second vulnerability CVE-2017-9773 is a DOS vulnerability. This only affects Horde installations that do not have a configured image handling backend, and thus use the "Null" image driver. It is exploitable by a logged in user clicking on a maliciously crafted URL...