243 matches found
Security Bulletin: Multiple vulnerabilities within OpenSSL and Node.js affect IBM App Connect Enterprise and IBM Integration Bus
Summary IBM App Connect Enterprise and IBM Integration Bus are vulnerable to denial of service and remote attack due to OpenSSL and Node.js. CVE-2022-4450, CVE-2023-0216 & CVE-2023-0401, CVE-2022-4203, CVE-2023-0217, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286 & CVE-2022-25881. The fix includes...
Tenable Nessus 10.x >= 10.2.1 and < 10.4.3 Multiple Vulnerabilities (TNS-2023-11)
According to its self-reported version, the Tenable Nessus application running on the remote host is between 10.2.1 and 10.4.2. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 3.0.8: - An attacker that had observed a genuine connection between a client and a...
Tenable Nessus 8.15.x >= 8.15.4 and < 8.15.9 Multiple Vulnerabilities (TNS-2023-10)
According to its self-reported version, the Tenable Nessus application running on the remote host is between 8.15.4 and 8.15.8. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 1.1.1t: - An attacker that had observed a genuine connection between a client and a...
Security Bulletin: IBM DataPower Gateway potentially vulnerable to Denial of Service (CVE-2022-4450)
Summary IBM has addressed the CVE Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioex function. By sending specially crafted PEM files for...
Oracle Linux 9 : openssl (ELSA-2023-12152)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12152 advisory. - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed...
RHEL 9 : openssl (RHSA-2023:0946)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0946 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
K55102452: TMM vulnerability CVE-2017-6140
Security Advisory Description Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suites may cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms: 2000s, 2200s, 4000s, 4200v,...
Debian dla-3325 : libssl-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3325 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3325-1 [email protected]...
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
1.1.1t-alt1 built Feb. 20, 2023 Gleb Fotengauer-Malinovskiy in task 314826 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...
Fedora: Security Advisory for edk2 (FEDORA-2023-e1ffb79ddf)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
K000132635: OpenSSL vulnerability CVE-2022-4450
Security Advisory Description The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers...
FreeBSD -- Multiple vulnerabilities in OpenSSL
Problem Description: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrect...
CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21
CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...
CVE-2022-4450 affecting package openssl 1.1.1k-16
CVE-2022-4450 affecting package openssl 1.1.1k-16. A patched version of the package is available...
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
1.1.1t-alt1 built Feb. 10, 2023 Gleb Fotengauer-Malinovskiy in task 314825 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...
CVE-2022-4450
creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:31+00:00| seen| https://t.me/cibsecurity/57799 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2024-02-10 10:41:39+00:00| seen| https://t.me/ctinow/182524 2025-02-13 11:00:00+00:00| seen|...
roaring-landmask (0.4.0) potentially affected by CVE-2022-4450 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4450 Source advisory: OSV:GHSA-V5W6-WCM8-JM4Q...
AZL-37892 CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4
The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data...
