1366 matches found
CVE-2026-63570
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...
mkchain
mkchain 有効なSSL証明書チェーンを構築するためのオープンソースツール 説明 • 使い方 • パラメータ • 動作の仕組み • 要件 • その他 • ライセンス 説明 有効なSSL証明書チェーンを構築するためのオープンソースツールです。不完全なチェーンを修正し、不足しているCA証明書をすべてダウンロードするのにも役立ちます。リモートサーバーからすべての証明書をダウンロードし、証明書チェーンを正しく構成することもできます。 使い方 簡単です: このリポジトリをクローン git clone https://github.com/trimstray/mkchain リポジトリに移動 c...
CVE-2022-3602
CVE−2022-3602 这是什么？ 本文档及仓库是 CVE−2022-3602 的分析文章，这是 OpenSSL 中的一个 punycode 缓冲区溢出问题。它是一份“反 POC”（该问题似乎不可利用），面向那些自行维护 OpenSSL 构建的人以及编译器维护者。 同一版本中还有另一个 CVE，CVE-2022-3786，它同样会导致缓冲区溢出，但在那种情况下攻击者无法控制内容。此处没有针对该问题的复现程序，但该问题可能导致崩溃，从而引发拒绝服务。 崩溃和缓冲区溢出从来都不是好事，如果你正在使用 OpenSSL 3.0.x，建议尽快更新。 欢迎通过 GitHub issue 或...
Rocky Linux 9.6 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.6:CLSA-2026:1782721550)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782721550 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number o...
AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1782215293)
The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782215293 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of...
Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_19144)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619144 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 golang:...
Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_28074)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628074 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls: Deni...
Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_27740)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627740 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 Tenable has extracted the preceding descripti...
Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1782154116)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782154116 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number o...
AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776427525)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776427525 advisory. - Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non- linearly with respect t...
Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1782215995)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782215995 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number o...
Rocky Linux 9.6 [TuxCare] Security Update: runc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782726184)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782726184 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates...
AlmaLinux 9.6 [TuxCare] Security Update: runc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782726184)
The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782726184 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...
crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
CVE-2026-0257
使用 TLS 的公钥伪造 GlobalProtect 身份验证覆盖 Cookie CVE-2026-0257 一个概念验证脚本，用于测试目标 PAN-OS GlobalProtect 门户或网关是否存在 CVE-2026-0257。该脚本会遍历 HTTPS 服务使用的证书链，并针对链中的每个公钥伪造一个有效的身份验证覆盖 Cookie，然后对 GlobalProtect 目标进行测试，验证其是否有效。 成功伪造的 Cookie 将登录 GlobalProtect 目标并检索 VPN 连接信息（使用 --verbose 参数查看详细信息）。 使用方法 $ python...
crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...