Linux Distros Unpatched Vulnerability : CVE-2017-13039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. CVE-2017-13039 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2017-10918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka...

Linux Distros Unpatched Vulnerability : CVE-2015-8239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them befo...

Linux Distros Unpatched Vulnerability : CVE-2019-17055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that...

Linux Distros Unpatched Vulnerability : CVE-2016-2368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in...

Linux Distros Unpatched Vulnerability : CVE-2019-15890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c. CVE-2019-15890 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-15016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. CVE-2017-15016 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2020-15859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU 4.2.0 has a use-after-free in hw/net/e1000ecore.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO...

Linux Distros Unpatched Vulnerability : CVE-2017-13015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint. CVE-2017-13015 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2016-1762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

Linux Distros Unpatched Vulnerability : CVE-2012-5500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by...

Linux Distros Unpatched Vulnerability : CVE-2017-11533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...

Linux Distros Unpatched Vulnerability : CVE-2017-17669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunkint.cpp in Exiv2 0.26. A crafted PNG file will lead to ...

Linux Distros Unpatched Vulnerability : CVE-2014-2972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2018-14351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size...

Linux Distros Unpatched Vulnerability : CVE-2017-6512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vecto...

Linux Distros Unpatched Vulnerability : CVE-2017-12137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to mapgrantref. CVE-2017-12137 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2015-8764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow. CVE-2015-8764 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2017-12182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute...

Linux Distros Unpatched Vulnerability : CVE-2017-6473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by...