5557 matches found
okhttp: information disclosure via improperly used cryptographic function
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...
okhttp: information disclosure via improperly used cryptographic function
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...
Intel IPP Cryptography software å®å Øę¼ę“
Intel IPP Cryptography software is an application from Intel Corporation USA. A security vulnerability exists in Intel IPP Cryptography software versions prior to 2021.6, which stems from insufficient control flow management and could allow an authenticated user to potentially enable information...
PT-2023-13536 Ā· Intel Ā· Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable information disclosure via local access...
PT-2023-14007 Ā· Intel Ā· Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an unauthenticated user to potentially enable information disclosure via local access...
Intel IPP Cryptography software å®å Øę¼ę“
Intel IPP Cryptography software is an application from Intel Corporation USA. A security vulnerability exists in Intel IPP Cryptography software versions prior to 2021.6 that stems from incomplete cleanup and could allow a privileged user to potentially enable information disclosure via local...
PT-2023-13906 Ā· Intel Ā· Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to incomplete cleanup in the IntelR IPP Cryptography software, which may allow a privileged user to potentially enable information disclosure via loca...
Intel IPP Cryptography software å®å Øę¼ę“
Intel IPP Cryptography software is an application from Intel Corporation USA. A security vulnerability exists in Intel IPP Cryptography software versions prior to 2021.6 that stems from inadequate control flow management and could allow unauthenticated users to potentially enable information...
EulerOS 2.0 SP10 : python-cryptography (EulerOS-SA-2023-1809)
According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions...
SUSE-SU-2023:2144-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption in Cipher.updateinto bsc1208036...
SUSE-SU-2023:0722-2 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object bsc1208036...
Moderate: Red Hat Security Advisory: libreswan security update
An update for libreswan is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
golang: crypto/tls: session tickets lack random ticket_age_add
A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption...
Low: openssl security and bug fix update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Using a Custom Cipher with NIDundef may lead to NULL encryption CVE-2022-3358 For more details...
PT-2023-18792 Ā· LibreswanĀ +4 Ā· LibreswanĀ +4
Name of the Vulnerable Software and Affected Versions: libreswan affected versions not specified Description: A security issue was found in the libreswan library. This occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not...
IntelĀ® IPP CryptographyĀ Advisory
Summary: Potential security vulnerabilities in IntelĀ® Integrated Performance Primitives IPP Cryptography software may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37409 Description: Insufficie...
EulerOS 2.0 SP10 : python-cryptography (EulerOS-SA-2023-1827)
According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions...
Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-1809)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-1827)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fuzztruction - Prototype Of A Fuzzer That Does Not Directly Mutate Inputs (As Most Fuzzers Do) But Instead Uses A So-Called Generator Application To Produce An Input For Our Fuzzing Target
Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer mutates the...