9280 matches found
Design/Logic Flaw
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32764
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32764
CVE-2022-32764 relates to a race condition in the Intel® DSA software prior to version 22.4.26 that may allow an authenticated user to escalate privileges through local access. The issue is confirmed by Intel’s advisory and related vulnerability records, which state the affected software is Intel...
CVE-2022-32764
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-30530
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-30530
CVE-2022-30530 concerns an Intel DSA software vulnerability affecting versions prior to 22.4.26, where a protection mechanism failure could allow an authenticated user to escalate privileges via local access. The issue is documented in the Intel DSA advisory and corroborated by multiple feeds; th...
CVE-2022-30530
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
PT-2023-13192 · Intel · Intel Dsa
Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 22.4.26 Description: The issue is related to a race condition that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to...
CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
SUSE CVE-2008-5659
The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...
SUSE CVE-2009-0021
NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...
SUSE CVE-2009-0025
BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...
SUSE CVE-2009-0125
NOTE: this issue has been disputed by the upstream vendor. nasl/naslcrypto2.c in the Nessus Attack Scripting Language library aka libnasl 2.2.11 does not properly check the return value from the OpenSSL DSAdoverify function, which allows remote attackers to bypass validation of the certificate...
SUSE CVE-2013-4206
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service crash and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting...
SUSE CVE-2013-4207
Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service crash via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a differe...
SUSE CVE-2014-0016
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator PRNG, which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC ECDSA or DSA...
SUSE CVE-2016-3959
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...