Linux Distros Unpatched Vulnerability : CVE-2019-12295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the numb...

Linux Distros Unpatched Vulnerability : CVE-2016-7878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class...

Linux Distros Unpatched Vulnerability : CVE-2017-15642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. CVE-2017-15642...

Linux Distros Unpatched Vulnerability : CVE-2016-10248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors...

Linux Distros Unpatched Vulnerability : CVE-2020-12391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have...

Linux Distros Unpatched Vulnerability : CVE-2017-14502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2016-7927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-80211.c:ieee80211radioprint. CVE-2016-7927 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2017-13014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions. CVE-2017-13014 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2020-14939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in savestructinternal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be...

Linux Distros Unpatched Vulnerability : CVE-2014-9636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than t...

Linux Distros Unpatched Vulnerability : CVE-2017-14501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file...

Linux Distros Unpatched Vulnerability : CVE-2020-9428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using mor...

Linux Distros Unpatched Vulnerability : CVE-2018-5207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string. CVE-2018-5207 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2016-9399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The calcstepsizes function in jpcdec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2017-14137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

Linux Distros Unpatched Vulnerability : CVE-2017-12604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by...

Linux Distros Unpatched Vulnerability : CVE-2020-27619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP. CVE-2020-27619 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2017-12995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print- domain.c:nsprint. CVE-2017-12995 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-16845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. CVE-2020-16845 Note...

Linux Distros Unpatched Vulnerability : CVE-2015-8668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute...