1036 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-10013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation. CVE-2016-10013...
Linux Distros Unpatched Vulnerability : CVE-2016-9391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large...
Linux Distros Unpatched Vulnerability : CVE-2017-5341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint. CVE-2017-5341 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-8355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8355 Note that...
Linux Distros Unpatched Vulnerability : CVE-2016-5027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file. CVE-2016-5027 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-9611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read an...
Linux Distros Unpatched Vulnerability : CVE-2017-16528
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or...
Linux Distros Unpatched Vulnerability : CVE-2017-12900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util- print.c:tok2strbuf. CVE-2017-12900 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2014-9092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker. CVE-2014-9092 Note th...
Linux Distros Unpatched Vulnerability : CVE-2015-7805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file...
Linux Distros Unpatched Vulnerability : CVE-2018-13866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5Faddrdecodelen in H5Fint.c. CVE-2018-13866 Not...
Linux Distros Unpatched Vulnerability : CVE-2020-21535
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c. CVE-2020-21535 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-9165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11. CVE-2017-9165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2016-7799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file. CVE-2016-7799 Not...
Linux Distros Unpatched Vulnerability : CVE-2017-16837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite...
Linux Distros Unpatched Vulnerability : CVE-2017-18183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject function in libqpdf/QPDFWriter.cc. CVE-2017-18183 Note...
Linux Distros Unpatched Vulnerability : CVE-2017-3001
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM...
Linux Distros Unpatched Vulnerability : CVE-2017-12994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint. CVE-2017-12994 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2018-7549
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. CVE-2018-7549 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2012-5644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libuser has information disclosure when moving user's home directory CVE-2012-5644 Note that Nessus relies on the presence of the package as reported by the...