14442 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: LibRaw (UTSA-2026-090027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090027 advisory. LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. Tenable has extracted the preceding description block directly from the Unity Lin...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090074)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090074 advisory. In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a craft...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002407)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002407 advisory. In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-001575)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001575 advisory. Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2024-005633)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005633 advisory. A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000563)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000563 advisory. Buffer Over-read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. No...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-054040)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054040 advisory. The thread function doesnt free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak. Tenable has extracted the preceding descriptio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090063)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090063 advisory. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forge...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090113)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090113 advisory. In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090455 advisory. In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirec...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2024-005631)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005631 advisory. An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpect...
Unity Linux 20.1070-8ae Security Update: bind (UTSA-2022-002009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002009 advisory. BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001492)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001492 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2026-090102)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090102 advisory. ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory...
Unity Linux 20.1070e Security Update: glibc (UTSA-2022-002147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002147 advisory. The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000319)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000319 advisory. Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090073)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090073 advisory. Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE Tenable has extracted the preceding description block directly from the Unity Linu...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2026-090401)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090401 advisory. The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: microcode_ctl (UTSA-2026-110879)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110879 advisory. Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary...