113 matches found
SUSE-SU-2021:3301-1 Security update for libcryptopp
This update for libcryptopp fixes the following issues: - CVE-2016-9939: Fixed potential DoS in Crypto++ libcryptopp ASN.1 parser bsc1015243...
SUSE: Security Advisory (SUSE-SU-2017:1471-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability in Bouncy Castle affect Apache Solr shipped IBM Operations Analytics - Log Analysis Analysis (CVE-2019-17359)
Summary IBM Operations Analytics - Log Analysis has addressed a vulnerability that could cause OutOfMemoryError error in Bouncy Castle. Vulnerability Details CVEID: CVE-2019-17359 DESCRIPTION: Bouncy Castle Crypto is vulnerable to a denial of service, caused by OutOfMemoryError error in ASN.1...
Security Bulletin: App Connect for Manufacturing 2.0 is affected by vulnerabilities of ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.6 (CVE-2019-17359)
Summary App Connect for Manufacturing 2.0 is affected by vulnerabilities of the ASN.1 parser in Bouncy Castle Crypto aka BC Java1.63 which were reported and have been addressed. Vulnerability Details CVEID: CVE-2019-17359 DESCRIPTION: Bouncy Castle Crypto is vulnerable to a denial of service,...
Denial Of Service (DoS)
strongswan is vulnerable to denial of service DoS. The vulnerability exists as the ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service infinite loop via a crafted certificate...
Huawei EulerOS: Security Advisory for strongimcv (EulerOS-SA-2019-2702)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : strongimcv (EulerOS-SA-2019-2702)
According to the version of the strongimcv package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to...
EulerOS 2.0 SP2 : strongimcv (EulerOS-SA-2019-2447)
According to the versions of the strongimcv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to...
GHSA-2MH8-GX2M-MR75 Out-of-Memory Error in Bouncy Castle Crypto
The ASN.1 parser in Bouncy Castle Crypto aka BC Java 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64...
Out-of-Memory Error in Bouncy Castle Crypto
The ASN.1 parser in Bouncy Castle Crypto aka BC Java 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64...
CVE-2019-17359
The ASN.1 parser in Bouncy Castle Crypto aka BC Java 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64...
CVE-2019-17359
The ASN.1 parser in Bouncy Castle Crypto aka BC Java 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64...
CVE-2019-6740
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update SMR-JAN-2019 - SVE-2018-13467. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
Heap overflow
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update SMR-JAN-2019 - SVE-2018-13467. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
CVE-2019-6740
CVE-2019-6740 affects Samsung Galaxy S9 (prior to Jan 2019 security update). The vulnerability lies in the ASN.1 parser: when parsing ASN.1 strings, the process fails to validate the length of user-supplied data before copying to a fixed-size heap-based buffer, enabling remote code execution. Exp...
CVE-2019-6740
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update SMR-JAN-2019 - SVE-2018-13467. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...
CVE-2017-18315
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600...
Buffer overflow
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600...
CVE-2017-18315
CVE-2017-18315 describes a buffer over-read in an older ASN.1 parser in Qualcomm Snapdragon Mobile SD600. Affected component is the Snapdragon SD 600 platform; root cause is a vulnerability in the ASN.1 parsing code that can lead to a local vulnerability with complete impact on confidentiality, i...