9682 matches found
Debian DSA-5354-1 : snort - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5354 advisory. Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacker t...
Critical: nss-softokn
Issue Overview: NSS Network Security Services up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using...
Critical: nss
Issue Overview: NSS Network Security Services up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using...
Critical: nss-util
Issue Overview: NSS Network Security Services up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using...
Critical: nspr
Issue Overview: NSS Network Security Services up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS 7, or PKCS 12 are likely to be impacted. Applications using...
Debian DSA-5351-1 : webkit2gtk - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5351 advisory. - A type confusion issue was addressed with improved checks. CVE-2023-23529 Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
DEBIAN-CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
CVE-2021-43529
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
Heap overflow
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...
CVE-2022-32764
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-30530
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-30530
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
Race condition
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32764
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32764
Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32764
CVE-2022-32764 relates to a race condition in the Intel® DSA software prior to version 22.4.26 that may allow an authenticated user to escalate privileges through local access. The issue is confirmed by Intel’s advisory and related vulnerability records, which state the affected software is Intel...