CVE-2026-45185

CVE-2026-45185 — Dead.Letter: UAF de heap en Exim a root remoto CVSS 9.8 Crítico | Exim 4.97–4.99.2 | Compilaciones de Ubuntu / GnuTLS | Sin autenticación Informe completo con traza de GDB, análisis paso a paso y datos de exposición global:...

ciphertest

cipherTest.sh por Patrick Bogen cipherTest.sh es un "mejor" comprobador de cifrados SSL en el sentido de que utiliza gnutls, que tiene soporte para muchas más configuraciones que openssl. Prueba potencialmente 3,200 configuraciones diferentes pero realiza una pre-optimización para minimizar las...

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

CVE-2014-3466_PoC

Prueba de concepto para CVE-2014-3466 desbordamiento de búfer en GnuTLS: comprobación de longitud del id de sesión Información Ver: https://bugzilla.redhat.com/showbug.cgi?id=1101932 Esto no es un exploit armado. Aviso: este código Python es feo, básicamente construí el ServerHello a mano y solo...

cryptodev-linux

cryptodev-linux Este es un controlador de dispositivo /dev/crypto, equivalente a los de OpenBSD o FreeBSD. La idea principal es acceder a los cifrados existentes en el espacio del kernel desde el espacio de usuario, permitiendo así la reutilización de una implementación de hardware de un cifrado...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — Escáner de vulnerabilidades de Exim «Dead.Letter» Un script de shell para detectar si un sistema Linux es vulnerable a CVE-2026-45185, un use-after-free en el agente de transferencia de correo Exim que puede conducir a la ejecución remota de código. Diseñado para su uso en...

CVE-2026-57163

PJSIP , a multimedia communication library written in C, contains a stack buffer overflow in its GnuTLS backend (tls_cert_get_info() in ssl_sock_gtls.c) triggered when parsing the Subject Alternative Name extension of a peer certificate. An incorrect buffer-size value causes an oversized entry to...

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 Propósito de este PoC Este PoC y el artículo relacionado fueron creados para postular al proyecto "Challenge CVE-2020-13777". CVE-2020-13777 es una vulnerabilidad de GnuTLS cuyo parche está ampliamente distribuido. Este PoC tiene como objetivo contribuir a mejorar la...

cve-2020-13777

针对CVE-2020-13777的Zeek测试脚本 该脚本执行一个简单的测试，检查服务器是否可能受到CVE-2020-13777的影响。 CVE-2020-13777导致GnuTLS创建未加密的会话票证。通过检查gnutls是否将 keyname 设置为零（它使用会话票证的前16个字节）似乎可以检测到这一点。此脚本检查： 服务器是否发送可疑的会话票证 客户端是否成功使用可疑的会话票证恢复与服务器的连接 这两种情况都表明服务器正在使用存在漏洞的GnuTLS版本。 发现的情况会写入notice.log。示例输出： root@kitploit: 1591660828.497706...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2.0.2)

The version of AHV installed on the remote host is prior to 11.2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2.0.2 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.54 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.54 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0. Vulnerability Details CVEID:CVE-2024-28835 DESCRIPTION: A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.8)

The version of AHV installed on the remote host is prior to 11.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.8 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. The gnutlspkcs11tokensetpin function, which is used to change the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

Astra Linux – Vulnerability in gnutls28

A issue was discovered in GnuTLS before version 3.6.15. A server can cause a NULL pointer dereferencing in a TLS 1.3 client if a norenegotiation alert is sent at an unexpected time, resulting in an invalid second handshake. The crash occurs during the application’s error handling process, where t...