431 matches found
MGASA-2022-0113 Updated openssl packages fix security vulnerability
Infinite loop in BNmodsqrt reachable when parsing certificates. CVE-2022-0778...
Updated openssl packages fix security vulnerability
Infinite loop in BNmodsqrt reachable when parsing certificates. CVE-2022-0778...
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2022:0935-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0935-1 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...
Oracle Linux 8 : openssl (ELSA-2022-9233)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9233 advisory. 1:1.1.1k-5.0.1 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Orabug: 33974871 Tenable has extracted the preceding description block directly from th...
Oracle Linux 8 : openssl (ELSA-2022-9243)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9243 advisory. 1:1.1.1k-5.0.1 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Orabug: 33974871 Tenable has extracted the preceding description block directly from th...
openssl security update
1:1.1.1k-5.0.1 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Orabug: 33974871...
openssl security update
1:1.1.1k-5.0.1 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Orabug: 33974871...
SUSE: Security Advisory (SUSE-SU-2022:0935-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:0935-1 Security update for nodejs12
This update for nodejs12 fixes the following issues: Update to 12.22.11, which adjusts dependencies for openssl sources to 1.1.1n. Addressing the following issue in openssl: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877...
OpenSSL Infinite loop when parsing certificates CVE-2022-0778
A vulnerability CVE-2022-0778 was found in OpenSSL that allows to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied...
F5 Networks BIG-IP : OpenSSL vulnerability (K31323265)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K31323265 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that c...
openssl security update
1.0.2k-24.0.3 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt...
CVE-2022-0778 affecting package openssl 1.1.1k-16
CVE-2022-0778 affecting package openssl 1.1.1k-16. A patched version of the package is available...
Oracle Linux 7 : openssl (ELSA-2022-9237)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9237 advisory. 1.0.2k-24.0.3 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Tenable has extracted the preceding description block directly from the Oracle Linux...
Oracle Linux 7 : openssl (ELSA-2022-9225)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9225 advisory. - fix CVE-2022-0778 openssl: Fix possible infinite loop in BNmodsqrt Tenable has extracted the preceding description block directly from the Oracle Linux securi...
Oracle Linux 7 : openssl (ELSA-2022-9224)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9224 advisory. 1.0.2k-24.0.3 - fix CVE-2022-0778 - possible infinite loop in BNmodsqrt Tenable has extracted the preceding description block directly from the Oracle Linux...
openssl security update
1.0.2k-24.0.3 - fix CVE-2022-0778 openssl: Fix possible infinite loop in BNmodsqrt - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison Orabug: 32467026 - Add DH support changes for SP 800-56A rev3 requirements Orabug: 32467059 - Add TLS KDF self-test Orabug: 32467193 -...
OpenSSL security releases require Node.js security releases
OpenSSL security releases require Node.js security releases Update 18-Mar-2022 Security releases available Updates are now available for v17.x, v16.x, v14.x, and v12.x Node.js release lines to incorporate upstream patches from OpenSSL. Update to OpenSSL 3.0.2n and 1.1.1n, High CVE-2022-0778...
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1n-alt1
1.1.1n-alt1 built March 18, 2022 Gleb Fotengauer-Malinovskiy in task 296705 March 15, 2022 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1n fixes CVE-2022-0778...