CVE-2022-30530

Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

Race condition

Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32764

Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32764

Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32764

CVE-2022-32764 relates to a race condition in the Intel® DSA software prior to version 22.4.26 that may allow an authenticated user to escalate privileges through local access. The issue is confirmed by Intel’s advisory and related vulnerability records, which state the affected software is Intel...

CVE-2022-30530

Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30530

Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30530

CVE-2022-30530 concerns an Intel DSA software vulnerability affecting versions prior to 22.4.26, where a protection mechanism failure could allow an authenticated user to escalate privileges via local access. The issue is documented in the Intel DSA advisory and corroborated by multiple feeds; th...

CVE-2021-43529

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

PT-2023-13192 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 22.4.26 Description: The issue is related to a race condition that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to...

CVE-2022-30530: Undefined Security Weakness

Protection mechanism failure in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32764: Concurrent Execution using Shared Resource with Improper Synchronization

Description: Race condition in the IntelR DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-43529

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

CVE-2021-43529

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

CVE-2021-43529

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

SUSE CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

SUSE CVE-2009-0021

NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...

SUSE CVE-2009-0025

BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

SUSE CVE-2009-0125

NOTE: this issue has been disputed by the upstream vendor. nasl/naslcrypto2.c in the Nessus Attack Scripting Language library aka libnasl 2.2.11 does not properly check the return value from the OpenSSL DSAdoverify function, which allows remote attackers to bypass validation of the certificate...