SUSE: Security Advisory (SUSE-SU-2022:1410-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : go1.17 (SUSE-SU-2022:1411-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1411-1 advisory. - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of...

SUSE: Security Advisory (SUSE-SU-2022:1411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-9547 CVE-2022-28327 affecting package golang for versions less than 1.18.3-1

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327

CVE-2022-28327 affects Go's crypto/elliptic P-256 in Go up to versions before 1.17.9 and 1.18.x before 1.18.1, where a crafted long scalar input can cause a panic in ScalarMult/ScalarBaseMult, leading to availability impact. Affected component: crypto/elliptic P-256. Mitigation: upgrade Go to 1.1...

CVE-2022-28327

Removed by vendor...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

Security fix for the ALT Linux 10 package golang version 1.17.9-alt1.p10

1.17.9-alt1.p10 built April 18, 2022 Alexey Shabalin in task 298503 --- April 15, 2022 Alexey Shabalin - New version 1.17.9 Fixes: CVE-2022-24675, CVE-2022-28327, CVE-2022-27536...

CVE-2021-28327

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-28327

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-28327

Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2021-28327 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2021-28327

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

KB5001389: Windows Server 2008 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - Windows Kernel Information Disclosure Vulnerability CVE-2021-27093, CVE-2021-28309 - Windows Media...

KB5001342: Windows 10 version 1809 / Windows Server 2019 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

KB5001347: Windows 10 version 1607 / Windows Server 2016 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Microsoft Internet Messaging API Remote Code...

KB5001343: Windows Azure Stack HCI Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc. The descriptive text and...

CVE-2020-28327

A respjsipsession crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1. and Certified Asterisk before 16.8-cert5. Upon receiving a new SIP Invite, Asterisk did not return the created dialog locked or referenced. This...