Linux Distros Unpatched Vulnerability : CVE-2026-40017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD...

Linux Distros Unpatched Vulnerability : CVE-2025-70292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None Ubuntu Linux - Unknown description CVE-2025-70292 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-38820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/...

FreeBSD : Elixir -- Denial of service via uncontrolled recursion in charlist conversion (aac25935-f19d-4ac8-80fc-043365686a63)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aac25935-f19d-4ac8-80fc-043365686a63 advisory. tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a...

openSUSE 16 Security Update : wget (openSUSE-SU-2026:21665-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21665-1 advisory. Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...

Linux Distros Unpatched Vulnerability : CVE-2026-38821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the...

Unity Linux 20.1060a / 20.1070a Security Update: pcp (UTSA-2024-004479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-004479 advisory. A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to...

Debian dla-4759 : xrdp - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4759 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4759-1 [email protected]...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001398 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

Linux Distros Unpatched Vulnerability : CVE-2026-40015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001393 advisory. In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001429 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aacprobeone calls hardware-specific init function...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21670-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21670-1 advisory. Changes in cloudflared: - Update version to 2026.8.2 Update vendor archive to fix github.com/go-chi/chi/v5 boo1276196, CVE-2026-72815,...

Linux Distros Unpatched Vulnerability : CVE-2026-80725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GROLEGACYMAXSIZE 64KB, BIG TCP should only be permitted f...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001485 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the...

Linux Distros Unpatched Vulnerability : CVE-2026-33605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode...

Linux Distros Unpatched Vulnerability : CVE-2026-55584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSIALLOWED access-control check in readconfig.php trusts...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-82255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlle...

Linux Distros Unpatched Vulnerability : CVE-2026-42395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The logi...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001492)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001492 advisory. In the Linux kernel, the following vulnerability has been resolved: netns: Make getnetns handle zero refcount net Syzkaller hit a warning: refcountt: addition on 0;...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-000416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000416 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001507 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtpdevxmit syzbot/KMSAN reported use of uninit-value in getdevxmit 1...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002938 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in ofsysconregister kasprintf returns a pointer to...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035851 advisory. NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain...

Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104950 advisory. A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the gue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001504 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: fix LED ID check in ledtgcheck Syzbot has reported the following BUG detected...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001468 advisory. In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001437 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the fresh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001481 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisctreereducebacklog on TCHROOT In qdisctreereducebacklog, Qdiscs with major...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001426 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002649 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from deltimersync call in isr When deltimersync is calle...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001480 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovsctexit Since kfreercu, which is called in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001418 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open Yang Erkun reports that when two...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001447 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prpcreatetaggedframe The prpfillrct function can fail. In that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001448 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in sidpminit When the allocation of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002821 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIGDMAAPIDEBUGSG results...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001454 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002889 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpiecinit When the mpiecctx structure is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001487 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002709 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001391 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001440 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpinfitctl Fix an issue detected by syzbot with KASAN:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001443 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in triegetnextkey triegetnextkey allocates a node stack with size...

Unity Linux 20.1070a Security Update: dovecot (UTSA-2026-104990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104990 advisory. An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001397 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust against malicious packets syzbot found that slhcremember was...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001406 advisory. In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module, its...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035859 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035848 advisory. NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support '--enable-dnscrypt'. A bad...