AZL-39659 CVE-2023-5678 affecting package kata-containers for versions less than 3.2.0.azl1-1

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHgeneratekey to generate an X9.42 DH key may experience long delays. Likewise, applications that use...

OpenSSL DH Check Buffer Overflow DoS

The vulnerabilities of the functions DHcheck, DHcheckex, and EVPPKEYparamcheck in the OpenSSL library are related to excessive iteration. Exploiting these vulnerabilities can allow a remote attacker to cause service failures...

PT-2020-13611

Name of the Vulnerable Software and Affected Versions Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK versions 2.2.3 and earlier Description The Bluetooth Low Energy Secure Manager Protocol implementation has a flaw that allows an attacker in radio range to skip the Diffie-Hellman check duri...

CVE-2020-13593: Improper Verification of Cryptographic Signature

The Bluetooth Low Energy Secure Manager Protocol SMP implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radi...