Linux Distros Unpatched Vulnerability : CVE-2017-13077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker...

Linux Distros Unpatched Vulnerability : CVE-2020-22628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2017-10806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in hw/usb/redirect.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU process crash via...

Linux Distros Unpatched Vulnerability : CVE-2017-8350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8350 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-4181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. CVE-2018-4181 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2017-12640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. CVE-2017-12640 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2015-1779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service memory and CPU consumption via a large 1 websocket payload or 2 HTT...

Linux Distros Unpatched Vulnerability : CVE-2018-20622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when --output-format jp2 is used. CVE-2018-20622 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2020-28852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In x/text in Go before v0.3.5, a slice bounds out of range panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. x/text/language is suppos...

Linux Distros Unpatched Vulnerability : CVE-2017-7395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In TigerVNC 1.7.1 SMsgReader.cxx SMsgReader::readClientCutText, by causing an integer overflow, an authenticated client can crash the server. CVE-2017-7395 Note...

Linux Distros Unpatched Vulnerability : CVE-2016-7950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out- of-bounds write operations via vectors involving filt...

Linux Distros Unpatched Vulnerability : CVE-2014-3209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by...

Linux Distros Unpatched Vulnerability : CVE-2015-8785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fusefillwritepages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service infinite loop via a writev syst...

Linux Distros Unpatched Vulnerability : CVE-2018-16057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in...

Linux Distros Unpatched Vulnerability : CVE-2020-11096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FreeRDP before version 2.1.2, there is a global OOB read in updatereadcachebitmapv3order. As a workaround, one can disable bitmap cache with -bitmap-cache...

Linux Distros Unpatched Vulnerability : CVE-2017-9171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input- bmp.c:492:24. CVE-2017-9171 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2020-16135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. CVE-2020-16135 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2016-7984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftpprint. CVE-2016-7984 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-13711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU aka Quick Emulator allows attackers to cause a denial of service QEMU instance cra...

Linux Distros Unpatched Vulnerability : CVE-2019-19036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfsrootnode in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcudereferenceroot-node can be zero. CVE-2019-190...