CVE-2021-3450

creationtimestamp| type| source ---|---|--- 2021-03-25 17:13:49+00:00| seen| https://t.me/BleepingComputer/9406 2021-03-26 15:59:46+00:00| seen| https://t.me/thehackernews/1114 2026-03-31 07:46:57+00:00| seen| https://gist.github.com/DmitriyLewen/1a8cf11df4bf524d609e669f6be82bb5...

CVE-2021-3450

CVE-2021-3450 affects OpenSSL 1.1.1h–1.1.1j where a bug in the X509_V_FLAG_X509_STRICT path overwrote a prior CA-check result, bypassing the non-CA certificates prohibition unless a programmed purpose is used. When a purpose is configured, the certificate chain is still rejected; the issue is fix...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1k-alt1

March 25, 2021 Gleb Fotengauer-Malinovskiy 1.1.1k-alt1 - Updated to 1.1.1k fixes CVE-2021-3450, CVE-2021-3449...

CVE-2021-3450

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

FreeBSD-SA-21:07.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:07.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2021-03-25 Affects:...

[ASA-202103-10] openssl: multiple issues

Arch Linux Security Advisory ASA-202103-10 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-3449 CVE-2021-3450 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1736 Summary ======= The package openssl befo...

CVE-2020-3450

Cisco Vision Dynamic Signage Director is affected by CVE-2020-3450 via the web-based management interface. The issue is a SQL injection caused by improper validation of user-submitted parameters, exploitable by an authenticated attacker with administrative credentials. Successful exploitation cou...

Solaris 10 (x86) : 136717-01

SunOS 5.10x86: namefs driver. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Important: Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Ubuntu 16.04 LTS : Open vSwitch vulnerabilities (USN-3450-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3450-1 advisory. Bhargava Shastry discovered that Open vSwitch incorrectly handled certain OFP messages. A remote attacker could possibly use this issue to cause Open...

Ubuntu: Security Advisory (USN-3450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3450

CVE-2015-3450 concerns a heap-based buffer overflow in libaxl 0.6.9. A crafted XML document can cause memory corruption, leading to denial of service or arbitrary code execution. The vulnerability is tied to libaxl’s XML handling; no specific vulnerable products or versions beyond 0.6.9 are state...

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)

This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

Security update for mysql-community-server (important)

This update for mysql-community-server to version 5.6.36 fixes the following issues: These security issues were fixed: - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

Fedora Update for community-mysql FEDORA-2017-fe6e14dcf9

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for community-mysql FEDORA-2017-ef6bed485e

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3450

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Memcached. Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3450

CVE-2017-3450 affects the MySQL Server component (Server: Memcached). Technical details in connected documents show affected versions 5.6.35 and earlier and 5.7.17 and earlier, with an unauthenticated network-accessable attacker able to cause a hang or complete DoS via Memcached/multiple protocol...

MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...