GO-2024-2617 Authentication bypass in github.com/hashicorp/vault

The TLS certificate authentication method incorrectly validates client certificates when configured with a non-CA certificate as a trusted certificate. When configured this way, attackers may be able to craft a certificate that can be used to bypass authentication...

CVE-2024-25331: Stack-based Buffer Overflow

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based Buffer Overflow...

PT-2024-2145 · D Link · D-Link Dir-822 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822 versions 2.02KRB09 through 2.03WWb01 D-Link DIR-822-CA versions 2.02KRB09 through 2.03WWb01 Description: The issue is related to a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based...

HP Printer Information Disclosure Vulnerability (HPSBPI03918)

Multiple HP printer are prone to an information disclosure vulnerability when connections made by the device back to services enabled by some solutions may have been trusted without the appropriate CA certificate in the device SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: aactl, kubernetes-dashboard, skaffold, spire-server, guac, step-ca, policy-controller, goreleaser, slsa-verifier, frp, tekton-chains, k3s, terragrunt, tkn, ko, flux-source-controller, temporal, sigstore-scaffolding, cosign, rekor, timestamp-authority, dgraph,...

[SECURITY] Fedora 40 Update: cryptlib-3.4.7-5.fc40

Cryptlib is a powerful security toolkit that allows even inexperienced crypto programmers to easily add encryption and authentication services to their software. The high-level interface provides anyone with the ability to add strong security capabilities to an application in as little as half an...

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: caddy, kine, ferretdb, spicedb, kots, trillian, step, caddy-fips, src, argo-workflows-fips, temporal-server-fips, k3s, step-ca, kube-bench, kube-bench-fips, argo-workflows, temporal-server, amass, wavefront-collector-for-kubernetes, falcosidekick-fips, trillian-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: spicedb, kots, amass, src, step-ca, caddy, step, kube-bench, ferretdb, trillian, argo-workflows, kine, k3s, temporal-server...

CVE-2024-27289 vulnerabilities

Vulnerabilities for packages: kots, step-ca, caddy, step, argo-workflows, trillian...

BIT-NODE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: caddy, vexctl, kargo, prometheus-node-exporter-fips, configmap-reload-fips, crossplane-provider-aws-dynamodb, prometheus-mysqld-exporter, vault-k8s, k8ssandra-operator, secrets-store-csi-driver-provider-aws, ip-masq-agent, mc-fips, envoy-ratelimit, rekor-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: spicedb, kots, amass, src, step-ca, caddy, step, kube-bench, ferretdb, trillian, argo-workflows, kine, k3s, temporal-server...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: caddy, kine, ferretdb, spicedb, kots, trillian, step, caddy-fips, src, argo-workflows-fips, temporal-server-fips, k3s, step-ca, kube-bench, kube-bench-fips, argo-workflows, temporal-server, amass, wavefront-collector-for-kubernetes, falcosidekick-fips, trillian-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: caddy, kine, ferretdb, spicedb, kots, trillian, step, caddy-fips, src, argo-workflows-fips, temporal-server-fips, k3s, step-ca, kube-bench, kube-bench-fips, argo-workflows, temporal-server, amass, wavefront-collector-for-kubernetes, falcosidekick-fips, trillian-fips...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: step, caddy, argo-workflows-fips, trillian, trillian-fips, argo-workflows, wavefront-collector-for-kubernetes, kots, step-ca, caddy-fips...

Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Summary Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate . In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

openSUSE: Security Advisory for ca (SUSE-SU-2023:3454-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ca (SUSE-SU-2023:0037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2024-1225 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate...