22163 matches found
Astra Linux – Vulnerability in Waitress
Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client can send a request that is exactly recvbytes long default: 8192, followed by a secondary request using HTTP pipeling. When request lookahead is disabled default, we do not read any further requests. If the first...
Astra Linux – Vulnerability in gnutls28
A flaw was discovered in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behaviors in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, it can result in a noticeable reducti...
Astra Linux – Vulnerability in gst-plugins-base1.0
GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the functi...
CVE-2023-37482: Observable Discrepancy
The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames...
PT-2025-6188 · Siemens · Simatic Drive Controller Cpu 1504D Tf +39
Name of the Vulnerable Software and Affected Versions: Web server affected versions not specified Description: The login functionality of the web server does not normalize the response times of login attempts, allowing an unauthenticated remote attacker to exploit this side-channel information to...
Security update for go1.22
This update for go1.22 fixes the following issues: CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le bsc1236801. Bug fixes: go1.22 release tracking bsc1218424 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...
Security update for openssl-1_1
This update for openssl-11 fixes the following issues: CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:0390-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136...
SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2025:0356-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0356-1 advisory. - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136 Tenable has extracted the preceding description...
Azure Linux 3.0 Security Update: mariadb (CVE-2024-1543)
The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1543 advisory. - The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-...
SUSE: Security Advisory (SUSE-SU-2025:0388-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Azure Linux 3.0 Security Update: cloud-hypervisor / edk2 / hvloader / openssl (CVE-2022-4304)
The version of cloud-hypervisor / edk2 / hvloader / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4304 advisory. - A timing based side channel exists in the OpenSSL RSA Decryption...
Azure Linux 3.0 Security Update: mariadb (CVE-2024-1544)
The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1544 advisory. - Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular...
Azure Linux 3.0 Security Update: iperf3 (CVE-2024-26306)
The version of iperf3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26306 advisory. - iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing...
SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2025:0387-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0387-1 advisory. - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation bsc1236136. Tenable has extracted the preceding description block...
[slackware-security] openssl
New openssl packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1zbp2-i586-1slack15.0.txz: Upgraded. Apply patch to fix a low severity security issue: Fix timing side-channel in ECDSA...
GHSA-VR5F-PHP7-RG24
creationtimestamp| type| source ---|---|--- 2025-02-07 22:02:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3835...
CISCO-SA-20170907-STRUTS2
creationtimestamp| type| source ---|---|--- 2025-02-07 18:02:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3799...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation bsc1236136. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...