17053 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freeradius (UTSA-2026-090267)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090267 advisory. In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zziplib (UTSA-2023-003111)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003111 advisory. An issue was discovered in function zzipdiskentrytofileheader in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. Tenable has extracted the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002129)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002129 advisory. defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Uni...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090675)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090675 advisory. A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client trusts the host from...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-054053)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054053 advisory. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int string...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000318)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000318 advisory. Git is distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to g...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: microcode_ctl (UTSA-2026-091427)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091427 advisory. Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. Tenable has extracted...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002317)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002317 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. Tenable has extracted the preceding description block directly from the Unity Linux securi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2023-002143)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002143 advisory. A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000564)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000564 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000539 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. Tenable has extracted the preceding description block directly from the Unity Linux securi...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2022-001763)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001763 advisory. A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-054028)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054028 advisory. In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply...
Unity Linux 20.1070e Security Update: libxslt (UTSA-2022-001980)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001980 advisory. Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Tenabl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: LibRaw (UTSA-2026-090036)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090036 advisory. LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. Tenable has extracted the preceding description block directly from the Unity Lin...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nasm (UTSA-2023-002891)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002891 advisory. A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via craft...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-054066)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054066 advisory. BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen. Tenable has...
Unity Linux 20.1070e Security Update: glibc (UTSA-2022-002148)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-002148 advisory. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2024-002110)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002110 advisory. In Emacs before 29.3, Gnus treats inline MIME contents as trusted. Tenable has extracted the preceding description block directly from the Unity Linux security...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091348)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091348 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...