Linux Distros Unpatched Vulnerability : CVE-2020-12762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2020-12391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have...

Linux Distros Unpatched Vulnerability : CVE-2019-10899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a...

Linux Distros Unpatched Vulnerability : CVE-2017-17083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that writ...

Linux Distros Unpatched Vulnerability : CVE-2017-11753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-rea...

Linux Distros Unpatched Vulnerability : CVE-2016-10248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors...

Linux Distros Unpatched Vulnerability : CVE-2017-11720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file. CVE-2017-11720 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2016-9399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The calcstepsizes function in jpcdec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2017-14137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

Linux Distros Unpatched Vulnerability : CVE-2015-0295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2016-7927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-80211.c:ieee80211radioprint. CVE-2016-7927 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2020-14939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in savestructinternal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be...

Linux Distros Unpatched Vulnerability : CVE-2017-13014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions. CVE-2017-13014 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2014-9814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted wpg file. CVE-2014-9814 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-20570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read. CVE-2018-20570 Note that Nessus relies on the presence of the package as reported ...

Linux Distros Unpatched Vulnerability : CVE-2021-25291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. CVE-2021-25291...

Linux Distros Unpatched Vulnerability : CVE-2020-10378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond...

Linux Distros Unpatched Vulnerability : CVE-2019-16089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

Linux Distros Unpatched Vulnerability : CVE-2014-9749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stal...

Linux Distros Unpatched Vulnerability : CVE-2017-6828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to hav...