53 matches found
CVE-2021-1422
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
CVE-2021-1422: Reachable Assertion
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
PT-2021-3630
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software version 9.16.1 Cisco Firepower Threat Defense FTD Software version 7.0.0 Description A vulnerability in the software cryptography module could allow an authenticated, remote attacker or an...
p11_rpc_buffer_get_byte_array_value Buffer Overflow DoS
The vulnerability of the p11rpcbuffergetbytearrayvalue function in the library for working with PKCS P11-kit modules is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
ALPINE-CVE-2020-8623
In BIND 9.10.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.10.5-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: be running BIND tha...
Crypt::Perl Data Forgery Issue Vulnerability
Perl is a general-purpose, interpreted, dynamic, cross-platform programming language from the Perl community.Crypt:: Perl is one of the cryptographic modules. A data forgery issue vulnerability exists in Crypt::Perl::ECDSA in versions of Crypt::Perl prior to 0.32 Perl, which stems from a program...
Dell RSA BSAFE Crypto-J Encryption Issue Vulnerability
Dell RSA BSAFE Crypto-J is RSA's FIPS-validated Java cryptographic module. A security vulnerability exists in Dell RSA BSAFE Crypto-J versions prior to 6.2.5. An attacker could exploit this vulnerability to force both parties to compute the same predictable shared key...
kernel: crypto: privilege escalation in skcipher_recvmsg function
A flaw was found in the Linux kernel's skcipher component, which affects the skcipherrecvmsg function. Attackers using a specific input can lead to a privilege escalation...
CVE-2019-1706
A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance ASAv and Firepower 2100 Series running Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device that results in a...
Race condition
A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance ASAv and Firepower 2100 Series running Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device that results in a...
CVE-2019-1706: Improper Resource Shutdown or Release
A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance ASAv and Firepower 2100 Series running Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device that results in a...
Skcipher Kernel Privilege Escalation
The vulnerability of the Skcipher component crypto/algifskcipher.c in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
httpd: Padding Oracle in Apache mod_session_crypto
It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...