Linux Distros Unpatched Vulnerability : CVE-2017-13024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print- mobility.c:mobilityoptprint. CVE-2017-13024 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-11572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts parsettf.c resulting in DoS or code execution via a crafted otf file...

Linux Distros Unpatched Vulnerability : CVE-2015-9383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c. CVE-2015-9383 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2017-7697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libsamplerate before 0.1.9, a buffer over-read occurs in the calcoutputsingle function in srcsinc.c via a crafted audio file. CVE-2017-7697 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2020-27801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. CVE-2020-27801 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2016-6835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer...

Linux Distros Unpatched Vulnerability : CVE-2019-20387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input...

Linux Distros Unpatched Vulnerability : CVE-2019-19204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH i...

Linux Distros Unpatched Vulnerability : CVE-2019-7578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c. CVE-2019-7578 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-7439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord. CVE-2018-7439 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-13045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint. CVE-2017-13045 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2019-15903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to...

Linux Distros Unpatched Vulnerability : CVE-2017-13012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint. CVE-2017-13012 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2016-7410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfreadlocsection function in dwarfloc.c in libdwarf 20160613 allows attackers to cause a denial of service buffer over-read via a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2017-13042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print. CVE-2017-13042 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2018-14463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 2, a different vulnerability than CVE-2019-15167...

Linux Distros Unpatched Vulnerability : CVE-2017-9951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to...

Linux Distros Unpatched Vulnerability : CVE-2017-14860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of...

Linux Distros Unpatched Vulnerability : CVE-2018-10779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff. CVE-2018-10779 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-11362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffe...