Linux Distros Unpatched Vulnerability : CVE-2017-12997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print- lldp.c:lldpprivate8021print. CVE-2017-12997 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2019-12387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

Linux Distros Unpatched Vulnerability : CVE-2019-14663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Brandy 1.20.1 has a stack-based buffer overflow in fileioopenin in fileio.c via crafted BASIC source code. CVE-2019-14663 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2015-5231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process...

Linux Distros Unpatched Vulnerability : CVE-2019-20201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations...

Linux Distros Unpatched Vulnerability : CVE-2019-12295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the numb...

Linux Distros Unpatched Vulnerability : CVE-2015-4815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors...

Linux Distros Unpatched Vulnerability : CVE-2017-11447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service. CVE-2017-11447 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2016-8575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482. CVE-2016-8575 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-17084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARPMPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a...

Linux Distros Unpatched Vulnerability : CVE-2017-9167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:337:25. CVE-2017-9167 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2018-14436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. CVE-2018-14436 Note that Nessus relies on the presence of the package as reported by th...

Linux Distros Unpatched Vulnerability : CVE-2017-5341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint. CVE-2017-5341 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2020-26575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark through 3.2.7, the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c ...

Linux Distros Unpatched Vulnerability : CVE-2017-12994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint. CVE-2017-12994 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2017-11408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful...

Linux Distros Unpatched Vulnerability : CVE-2018-18284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator. CVE-2018-18284 Note...

Linux Distros Unpatched Vulnerability : CVE-2020-21535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c. CVE-2020-21535 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2018-7549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. CVE-2018-7549 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2012-5644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libuser has information disclosure when moving user's home directory CVE-2012-5644 Note that Nessus relies on the presence of the package as reported by the...