CVE-2021-40830 Inconsistent CA override function behavior within AWS IoT Device SDKs on Unix systems

The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority CA to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system’s default trust-store...

CVE-2021-40830: Improper Certificate Validation

The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority CA to the root CAs instead of overriding it on Unix systems. TLS handshakes will thus succeed if the peer can be verified either from the user-supplied CA or the system’s default trust-store...

CVE-2021-40831: Improper Certificate Validation

The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority CA to the root CAs instead of overriding it on macOS systems. Additionally, SNI validation is also not enabled when the CA has been “overridden”. TLS handshakes will thus succeed if the peer...

PT-2021-22966

Name of the Vulnerable Software and Affected Versions AWS IoT Device SDK v2 for Java versions prior to 1.5.0 on Linux/Unix AWS IoT Device SDK v2 for Python versions prior to 1.6.1 on Linux/Unix AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on Linux/Unix AWS IoT Device SDK v2 for Node.js...

PT-2021-22967

Name of the Vulnerable Software and Affected Versions AWS IoT Device SDK v2 for Java versions prior to 1.5.0 on macOS AWS IoT Device SDK v2 for Python versions prior to 1.7.0 on macOS AWS IoT Device SDK v2 for C++ versions prior to 1.14.0 on macOS AWS IoT Device SDK v2 for Node.js versions prior ...

Denial Of Service (DoS)

fort-validator is vulnerable to denial of service. The vulnerability exists due to lack of sanitization of certificate will allows an attacker to crash the system when an RPKI CA publishes an X.509 EE certificate...

WordPress 5.2.x < 5.2.13 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

WordPress 5.3.x < 5.3.10 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

WordPress 5.7.x < 5.7.4 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

WordPress 5.8.x < 5.8.2 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

WordPress 5.6.x < 5.6.6 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

PT-2021-26541

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.78 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.78,...

PT-2021-30487

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.158 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.158,...

PT-2021-30456

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.216 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.216,...

PT-2021-26616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.17 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.14.17,...

PT-2021-30433

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.255 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.255,...

PT-2021-26680

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.1 Description: A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.1,...

PT-2021-30536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.78 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.78,...

PT-2021-30675

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.1 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.1, updat...

PT-2021-30611

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.17 Description A buffer overflow issue exists in the avc ca pmt function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.14.17,...