14587 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-15722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string. CVE-2017-15722 Note...
Linux Distros Unpatched Vulnerability : CVE-2014-7967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2017-9165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11. CVE-2017-9165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2016-7799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file. CVE-2016-7799 Not...
Linux Distros Unpatched Vulnerability : CVE-2015-8984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash...
Linux Distros Unpatched Vulnerability : CVE-2016-5027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file. CVE-2016-5027 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2012-0880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table...
Linux Distros Unpatched Vulnerability : CVE-2017-15191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validatin...
Linux Distros Unpatched Vulnerability : CVE-2017-8355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8355 Note that...
Linux Distros Unpatched Vulnerability : CVE-2019-15807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sasexpander.c when SAS expander discovery fails. This will cause a BUG and deni...
Linux Distros Unpatched Vulnerability : CVE-2017-5341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint. CVE-2017-5341 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2016-10169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...
Linux Distros Unpatched Vulnerability : CVE-2017-9407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-9407 Note th...
Linux Distros Unpatched Vulnerability : CVE-2018-10393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CVE-2018-10393 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2018-17961
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists...
Linux Distros Unpatched Vulnerability : CVE-2018-14437
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. CVE-2018-14437 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2016-10006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input a tag that supports style with active content, you could bypass the library protections...
Linux Distros Unpatched Vulnerability : CVE-2018-14468
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint. CVE-2018-14468 Note that Nessus relies on the presence of the package a...
Linux Distros Unpatched Vulnerability : CVE-2016-10062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a...
Linux Distros Unpatched Vulnerability : CVE-2017-16808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpdump before 4.9.3 has a heap-based buffer over-read related to aoeprint in print-aoe.c and lookupemem in addrtoname.c. CVE-2017-16808 Note that Nessus relies...