Lucene search
+L

1613 matches found

RedhatCVE
RedhatCVE
•added 2022/01/31 5:57 p.m.•101 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS2.8AI score0.83645EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/01/31 12:00 a.m.•42 views

OpenSSL: BN_mod_exp may produce incorrect results on MIPS (CVE-2021-4160) - Linux

OpenSSL is prone to a carry propagation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

5.9CVSS5.9AI score0.03772EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2022/01/30 12:00 a.m.•107 views

FreeBSD : OpenSSL -- BN_mod_exp incorrect results on MIPS (1aaaa5c6-804d-11ec-8be6-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1aaaa5c6-804d-11ec-8be6-d4c9ef517024 advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are...

5.9CVSS6.7AI score0.03772EPSS
SaveExploits0References3
NVD
NVD
•added 2022/01/28 10:15 p.m.•44 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS0.03772EPSS
SaveExploits0References10
OSV
OSV
•added 2022/01/28 10:15 p.m.•52 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.7AI score
SaveExploits0References10
Prion
Prion
•added 2022/01/28 10:15 p.m.•52 views

Design/Logic Flaw

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

4.3CVSS5.3AI score0.83645EPSS
SaveExploits1References9Affected Software8
UbuntuCve
UbuntuCve
•added 2022/01/28 10:15 p.m.•56 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.7AI score0.03772EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2022/01/28 9:28 p.m.•62 views

CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

6.8AI score0.03772EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2022/01/28 9:28 p.m.•148 views

CVE-2021-4160

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.7AI score0.03772EPSS
SaveExploits0
CVE
CVE
•added 2022/01/28 9:28 p.m.•320 views

CVE-2021-4160

CVE-2021-4160 describes a carry propagation bug in the MIPS32/MIPS64 squaring procedure that can affect OpenSSL on MIPS platforms. The issue could impact RSA/DSA/DH and TLS operations under certain conditions, with practical exploitation described as very difficult or limited. Remediation is prov...

5.9CVSS6.2AI score0.03772EPSS
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•9 views

Mageia: Security Advisory (MGASA-2021-0492)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Ubuntu: Security Advisory (USN-5031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00274EPSS
SaveExploits0References4
FreeBSD
FreeBSD
•added 2022/01/28 12:00 a.m.•57 views

OpenSSL -- BN_mod_exp incorrect results on MIPS

The OpenSSL project reports: BNmodexp may produce incorrect results on MIPS Moderate There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the...

3.7CVSS6.5AI score0.83645EPSS
SaveExploits1References1
OpenSSL
OpenSSL
•added 2022/01/28 12:00 a.m.•155 views

BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

5.9CVSS6.6AI score0.83645EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/01/28 12:00 a.m.•217 views

OpenSSL 1.1.1 < 1.1.1m Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.1.1m. It is, therefore, affected by a vulnerability as referenced in the 1.1.1m advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1....

5.9CVSS6.7AI score0.83645EPSS
SaveExploits1References4
Oracle linux
Oracle linux
•added 2022/01/14 12:00 a.m.•71 views

openssl security update

1.0.2k-23.0.1 - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison Orabug: 32467026 - Add DH support changes for SP 800-56A rev3 requirements Orabug: 32467059 - Add TLS KDF self-test Orabug: 32467193 - Add EC keys pairwise consistency test Orabug: 32467059 1.0.2k-23 -...

7.4CVSS6.8AI score0.50445EPSS
SaveExploits0
OSV
OSV
•added 2021/12/27 7:15 p.m.•16 views

CVE-2021-32993

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

8.8CVSS5.8AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/27 7:15 p.m.•19 views

CVE-2021-33017

The standard access path of the IntelliBridge EC 40 and 60 Hub C.00.04 and prior requires authentication, but the product has an alternate path or channel that does not require authentication...

8.8CVSS7.3AI score0.00453EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/27 7:15 p.m.•30 views

CVE-2021-32993

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

8.8CVSS0.00272EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/27 7:15 p.m.•35 views

CVE-2021-33017

The standard access path of the IntelliBridge EC 40 and 60 Hub C.00.04 and prior requires authentication, but the product has an alternate path or channel that does not require authentication...

8.8CVSS0.00453EPSS
SaveExploits0References1
Rows per page
Query Builder