5272 matches found
MiracleLinux 7 : dnsmasq-2.76-16.el7.1 (AXSA:2021-1266:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1266:01 advisory. dnsmasq: loose address/port check in replyquery makes forging replies easier for an off-path attacker CVE-2020-25684 dnsmasq: loose query name check...
MiracleLinux 4 : dnsmasq-2.48-18.0.1.AXS4 (AXSA:2021-1429:04)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1429:04 advisory. dnsmasq: loose address/port check in replyquery makes forging replies easier for an off-path attacker CVE-2020-25684 dnsmasq: loose query name check...
CVE-2025-64769
The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subject to hijacking or data leakage in certain man-in-the-middle or passive inspection scenarios...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003981)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003981 advisory. A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001557)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001557 advisory. An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds...
MiracleLinux 7 : spice-0.14.0-6.el7.1 (AXSA:2019-3720:03)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3720:03 advisory. spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Tenable has extracted the preceding description block directly from the...
MiracleLinux 7 : libmspack-0.5-0.6.alpha.el7 (AXSA:2018-3385:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3385:01 advisory. libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks CVE-2018-14679 libmspack: off-by-one error in the CHM chunk number...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001466)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001466 advisory. A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000965)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000965 advisory. Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001455 advisory. An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000849)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000849 advisory. Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001627)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001627 advisory. In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over- read vulnerability. Tenable has extracted the preceding...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001306)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001306 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...
Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
...
iavf: fix off-by-one issues in iavf_config_rss_reg()
...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002796)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002796 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003208)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003208 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003309)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003309 advisory. In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over- read vulnerability. Tenable has extracted the preceding...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002571)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002571 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003070)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003070 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...