351 matches found
Exploit for CVE-2022-21449
CVE-2022-21449-TLS-PoC CVE-2022-21449 also dubbed Psychic Si...
CLSA-2022-1647550603 Fix CVE(s): CVE-2022-0778
SECURITY UPDATE: Infinite loop in BNmodsqrt - debian/patches/CVE-2022-0778.patch: fix infinite loop in crypto/bn/bnsqrt.c. - CVE-2022-0778...
OPENSUSE-SU-2022:0723-1 Security update for go1.17
This update for go1.17 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve bsc1195838. - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption bsc1195835. - CVE-2022-23773: Fixed incorrect acce...
RUSTSEC-2022-0011 Miscomputation when performing AES encryption in rust-crypto
The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...
CVE-2022-23806
A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...
CVE-2021-33147
The CVE-2021-33147 issue affects the Intel IPP Cryptography library prior to 2021.2. Affected component: Intel IPP Crypto library (before 2021.2). Root cause: improper conditions check may allow an authenticated user to cause information disclosure via local access. Impact: confidentiality exposu...
CVE-2021-33147: Improper Check for Unusual or Exceptional Conditions
Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...
Intel Integrated Performance Primitives 代码问题漏洞
Intel Integrated Performance Primitives IPP is a suite of programming tools for working with images, signal processing, and data from Intel Corporation USA. A code issue vulnerability exists in the Intel Integrated Performance Primitives Crypto library that stems from a potential security hole in...
Mageia: Security Advisory (MGASA-2017-0010)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for botan2 (FEDORA-2021-8d51cac49f)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: botan2-2.17.3-4.fc34
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
Fedora: Security Advisory for botan2 (FEDORA-2021-14b0d97496)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: botan2-2.18.2-1.fc35
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
Fedora: Security Advisory for cryptopp (FEDORA-2021-8b14da0538)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: cryptopp-8.6.0-1.fc33
Crypto++ Library is a free C++ class library of cryptographic schemes. See http://www.cryptopp.com/ for a list of supported algorithms. One purpose of Crypto++ is to act as a repository of public domain not copyrighted source code. Although the library is copyrighted as a compilation, the...
b2b (0.1.0), crust (>=0.0.7, <=0.0.65) +16 more potentially affected by CVE-2017-1000168 via sodiumoxide (>=0.0.4, <=0.0.13)
sodiumoxide CARGO version =0.0.4, =0.0.7, =0.5.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.4, =0.5.1, =0.0.1, =0.1.0 and more Source cves: CVE-2017-1000168 Source advisory: OSV:GHSA-2WC6-2RCJ-8V76...
UBUNTU-CVE-2021-34558
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...
Fedora: Security Advisory for libgcrypt (FEDORA-2021-31fdc84207)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...