Lucene search
K

55 matches found

OSV
OSV
added 2024/04/25 5:15 p.m.1 views

DEBIAN-CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.9AI score0.00068EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/04/25 5:15 p.m.248 views

CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.2AI score0.00068EPSS
Exploits0References2
OSV
OSV
added 2024/04/25 5:15 p.m.0 views

UBUNTU-CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.8AI score0.00068EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/04/25 4:45 p.m.276 views

CVE-2024-2467 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.4AI score0.00068EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/04/25 4:45 p.m.78 views

CVE-2024-2467 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.6AI score0.00068EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/04/25 12:0 a.m.1 views

Crypt-OpenSSL-RSA 安全漏洞

Crypt-OpenSSL-RSA is a library by the individual developer Todd Rinaldo. Crypt-OpenSSL-RSA suffers from a security vulnerability that stems from the presence of a timing-based side-channel flaw that is sufficient to recover plaintext over the network in a Bleichenbacher-style attack...

5.9CVSS6.8AI score0.00068EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2024/03/16 3:26 a.m.1 views

SUSE CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.8AI score0.00068EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.2 views

PT-2024-5167

Name of the Vulnerable Software and Affected Versions: perl-Crypt-OpenSSL-RSA affected versions not specified Description: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attac...

7.1CVSS5.7AI score0.00068EPSS
Exploits0References38
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.13 views

new packages: perl-Crypt-OpenSSL-RSA

An update is available for perl-Crypt-OpenSSL-RSA. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2.2AI score
Exploits0
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.8 views

new packages: perl-Crypt-OpenSSL-Bignum

An update is available for perl-Crypt-OpenSSL-Bignum. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...

2.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.23 views

Fedora 10 : perl-Crypt-OpenSSL-DSA-0.13-12.fc10 (2009-2090)

Fixes CVE-2009-0129: The Crypto::OpenSSL::DSA module now croaks upon error rather than returning a -1 to ensure programmers are not caught by surprise which only checking for non-zero results. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

5CVSS5.4AI score0.00075EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2009/03/02 12:0 a.m.20 views

Fedora Core 10 FEDORA-2009-2090 (perl-Crypt-OpenSSL-DSA)

The remote host is missing an update to perl-Crypt-OpenSSL-DSA announced via advisory FEDORA-2009-2090. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

5CVSS6.5AI score0.00075EPSS
Exploits2References2
Fedora
Fedora
added 2009/02/25 4:27 p.m.24 views

[SECURITY] Fedora 10 Update: perl-Crypt-OpenSSL-DSA-0.13-12.fc10

Crypt::OpenSSL::DSA - Digital Signature Algorithm using OpenSSL...

5CVSS2AI score0.00075EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2009/02/20 12:0 a.m.24 views

Fedora 9 : perl-Crypt-OpenSSL-DSA-0.13-9.fc9 (2009-1914)

Fixes CVE-2009-0129: The Crypto::OpenSSL::DSA module now croaks upon error rather than returning a -1 to ensure programmers are not caught by surprise which only checking for non-zero results. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

5CVSS5.4AI score0.00075EPSS
Exploits2References3
Fedora
Fedora
added 2009/02/19 2:18 p.m.27 views

[SECURITY] Fedora 9 Update: perl-Crypt-OpenSSL-DSA-0.13-9.fc9

Crypt::OpenSSL::DSA - Digital Signature Algorithm using OpenSSL...

5CVSS2AI score0.00075EPSS
Exploits2
Rows per page
Query Builder