194 matches found
CVE-2023-31135 Dgraph Audit Log Encryption nonce reuse
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
PT-2023-23169 · Dgraph · Dgraph
Name of the Vulnerable Software and Affected Versions: Dgraph versions prior to v23.0.0 Description: Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is...
CVE-2023-31135: Inadequate Encryption Strength
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
Dgraph 加密问题漏洞
Dgraph is Dgraph open source a horizontally scalable distributed GraphQL database with a graph backend. Dgraph version before 23.0.0 has a cryptographic problem vulnerability , the vulnerability stems from a nounce conflict , an attacker can use the vulnerability to brute-force attack on the log...
GHSA-P4G4-WGRH-QRG2 vulnerabilities
Vulnerabilities for packages: dgraph...
GHSA-WF43-55JJ-VWQ8 vulnerabilities
Vulnerabilities for packages: dgraph, etcd, etcd-fips...
CVE-2020-15136 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15114 vulnerabilities
Vulnerabilities for packages: dgraph, etcd, etcd-fips...
CVE-2020-15114 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15136 vulnerabilities
Vulnerabilities for packages: dgraph, etcd, etcd-fips...
CVE-2020-15106 vulnerabilities
Vulnerabilities for packages: dgraph...
CVE-2020-15106 vulnerabilities
Vulnerabilities for packages: dgraph, etcd, etcd-fips...