Linux Distros Unpatched Vulnerability : CVE-2012-2313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows...

Linux Distros Unpatched Vulnerability : CVE-2017-10980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows DHCP - Memory leak in decodetlv and a denial of service. CVE-2017-10980 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2016-9537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097. CVE-2016-9537 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2016-9803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In BlueZ 5.42, an out-of-bounds read was observed in lemetaevdump function in tools/parser/hci.c source file. This issue exists because 'subevent' which is used...

Linux Distros Unpatched Vulnerability : CVE-2015-4164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The compatiret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-7207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a...

Linux Distros Unpatched Vulnerability : CVE-2018-10801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TIFFClientOpen in tifunix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff. CVE-2018-10801 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2011-5320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s. CVE-2011-5320 Note...

Linux Distros Unpatched Vulnerability : CVE-2017-5486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint. CVE-2017-5486 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2017-8379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the keyboard input event handlers support in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host...

Linux Distros Unpatched Vulnerability : CVE-2018-19566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the...

Linux Distros Unpatched Vulnerability : CVE-2015-0223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10...

Linux Distros Unpatched Vulnerability : CVE-2017-17914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2019-3460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap data infoleak in multiple locations including L2CAPPARSECONFRSP was found in the Linux kernel before 5.1-rc1. CVE-2019-3460 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2019-19523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka...

Linux Distros Unpatched Vulnerability : CVE-2015-3406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed...

Linux Distros Unpatched Vulnerability : CVE-2017-6318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANENETCONTROLOPTION packet. CVE-2017-6318 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-12999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint. CVE-2017-12999 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2019-6129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pngcreateinfostruct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated I don't think it is libpng's job to fr...

Linux Distros Unpatched Vulnerability : CVE-2019-19603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. CVE-2019-19603 Note that Nessus relies on the...