148 matches found
CVE-2021-3711 SM2 Decryption Buffer Overflow
In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size...
CVE-2021-3711
CVE-2021-3711 involves a bug in OpenSSL SM2 decryption: the buffer-size calculation during EVP_PKEY_decrypt() first call can under-allocate, enabling a later second call with a too-small buffer and causing a buffer overflow (up to 62 bytes). The issue affects OpenSSL 1.1.1 up to 1.1.1k and is fix...
SUSE-SU-2021:2830-1 Security update for openssl-1_1
This update for openssl-11 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. bsc1189520 - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious...
OpenSSL 1.1.1 < 1.1.1l Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.1.1l. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1l advisory. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data...
Debian DSA-4963-1 : openssl - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4963 advisory. Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2021-3711 John Ouyang reported a buffer overflow vulnerability ...
CVE-2020-3711
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-3711
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-3711
CVE-2020-3711 affects Adobe Illustrator CC up to version 24.0 (Windows). The root cause is memory corruption in Illustrator, which could allow arbitrary code execution under the current user if exploited. Adobe’s APSB20-03 advisory and Threatpost report indicate updating to version 24.0.2 (or new...
Adobe Illustrator < 24.0.2 Multiple Arbitrary Code Execution (APSB20-03)
The version of Adobe Illustrator installed on the remote Windows host is prior to 24.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-03 advisory. - Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitatio...
CVE-2019-3711
RSA Authentication Manager versions prior to 8.4 P1 have an insecure credential management vulnerability in the Operations Console that may allow an authenticated administrator to obtain the value of a domain password previously set by another administrator and use it for attacks. Root cause: ins...
RHEL 7 : Red Hat OpenShift Enterprise 3.2 (RHSA-2016:1064)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1064 advisory. OpenShift Enterprise by Red Hat is the company's cloud computing Platform- as-a-Service PaaS solution designed for on-premise or private clo...
@axel92/nodejs-course (1.2.0), @brocan/bond (>=2.0.0, <=3.0.2) +17 more potentially affected by CVE-2018-3711 via fastify (>=0.5.0, <=0.37.0)
fastify NPM version =0.5.0, =2.0.0, =1.5.0, =0.0.1, =0.3.0, =0.1.0, =0.0.4, =0.0.1, =0.0.1, =0.12.0, =0.1.0, =0.1.1 - schnack 0.0.1-alpha and more Source cves: CVE-2018-3711 Source advisory: OSV:GHSA-MQ6C-FH97-4GWV...
Ubuntu: Security Advisory (USN-3711-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-3711-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3711-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using...
CVE-2018-3711
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload...
CVE-2018-3711
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload...
CVE-2018-3711
CVE-2018-3711 affects the Fastify node module prior to 0.38.0. A vulnerability allows a denial-of-service by sending a request with Content-Type: application/json and a very large payload, potentially making the service unresponsive. The issue is triggered by processing large JSON payloads; no ex...
Debian DSA-3711-1 : mariadb-10.0 - security update
Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.28. Please see the MariaDB 10.0 Release Notes for further details : - https://mariadb.com/kb/en/mariadb/mariadb-10028-release- notes/...
Debian Security Advisory DSA 3711-1 (mariadb-10.0 - security update)
Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.28. Please see the MariaDB 10.0 Release Notes for further details: https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/ OpenVAS...