CVE-2024-0853 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2024-0853 OCSP verification bypass with TLS session reuse

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

CVE-2024-0853 OCSP verification bypass with TLS session reuse

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

CVE-2024-0853

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...

CVE-2024-0853

CVE-2024-0853 affects curl by retaining SSL session IDs in the cache after an OCSP stapling verify status test fails, allowing a subsequent transfer to bypass verification if the session cache is still fresh. Connected documents confirm this is a curl vulnerability affecting multiple platforms an...

CVE-2024-0853

creationtimestamp| type| source ---|---|--- 2024-01-31 17:17:11+00:00| seen| https://t.me/ctinow/176897 2024-02-01 01:01:38+00:00| seen| https://t.me/ctinow/177232 2024-02-03 15:31:50+00:00| seen| https://t.me/ctinow/178586 2024-02-13 03:16:25+00:00| seen| https://t.me/ctinow/183579 2024-02-22...

Internet Bug Bounty: CVE-2024-0853: OCSP verification bypass with TLS session reuse

CVE-2024-0853 was a vulnerability in the cURL library where OCSP verification was bypassed when reusing a TLS session. The vulnerability was caused by cURL inadvertently keeping the SSL session ID in its cache even when the OCSP stapling verification failed. This allowed subsequent transfers to t...

CVE-2023-0853

creationtimestamp| type| source ---|---|--- 2023-05-11 16:15:26+00:00| seen| https://t.me/cibsecurity/63881...

CVE-2023-0853

Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C Series/LBP620C Series/MF74...

CVE-2023-0853

CVE-2023-0853 affects Canon imageCLASS/LBP/ MF series printers. A stack-based buffer overflow in the mDNS NSEC record registering process can allow network-adjacent attackers to trigger a crash or arbitrary code execution. Canon firmware versions prior to 11.05 (11.04 and earlier) on Canon LBP660...

SUSE: Security Advisory (SUSE-SU-2022:0853-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : thunderbird (RHSA-2022:0853)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0853 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.7.0. Security Fixes: Mozilla:...

CVE-2022-0853

CVE-2022-0853 describes a memory leak in the JBoss client when UserTransaction is used repeatedly, leading to information leakage. The CVE is referenced in Red Hat advisories for Red Hat JBoss Enterprise Application Platform / Red Hat Single Sign-On 7.6.1 across RHEL7/8/9 contexts, with CVSS data...

RHEL 7 : zsh (RHSA-2020:0853)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0853 advisory. The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the...

CVE-2020-0853

CVE-2020-0853 is a Windows Imaging Component information-disclosure vulnerability rooted in uninitialized memory in Windows image decoders. FireEye’s analysis shows uninitialized memory in windowscodecs!CFormatConverter::Initialize led to leaking pixel data during TIFF/image decoding; PoC output ...

CVE-2019-0853

Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.

Microsoft Windows GDI+ Component CVE-2019-0853 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected...

CVE-2018-0853

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability"...

CVE-2018-0853

The CVE-2018-0853 issue affects Microsoft Office products: Office 2010 SP2, Office 2013 SP1/RT SP1, Office 2016, and Office 2016 Click-to-Run. Root cause: an information disclosure vulnerability caused by how Office initializes an affected variable (uninitialized variable read). Impact summary: m...

Microsoft Office 2016 Information Disclosure Vulnerability (KB4011143)

This host is missing an important security update according to Microsoft KB4011143 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...