Lucene search
+L

2331 matches found

Tenable Nessus
Tenable Nessus
•added 2017/12/13 12:00 a.m.•74 views

Fedora 26 : erlang (2017-93b6236635) (ROBOT)

Ver. 19.3.6.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

5.9CVSS6.5AI score0.22098EPSS
SaveExploits0References2
Prion
Prion
•added 2017/12/12 9:29 p.m.•34 views

Code injection

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

4.3CVSS5.7AI score0.22098EPSS
SaveExploits0References13Affected Software2
OSV
OSV
•added 2017/12/12 9:29 p.m.•8 views

DEBIAN-CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS6.5AI score0.22098EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/12 9:29 p.m.•39 views

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS7AI score
SaveExploits0References13
CVE
CVE
•added 2017/12/12 9:00 p.m.•252 views

CVE-2017-1000385

CVE-2017-1000385 affects the Erlang OTP TLS server, where RSA PKCS#1 v1.5 padding errors elicit different TLS alerts, enabling a Bleichenbacher-style oracle to decrypt content or forge signatures with the server’s private key. Public disclosures describe a CERT/ROBOT-related risk and list affecte...

5.9CVSS5.6AI score0.22098EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
•added 2017/12/12 9:00 p.m.•61 views

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.8AI score0.22098EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2017/12/12 9:00 p.m.•26 views

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS6AI score0.22098EPSS
SaveExploits0
Mend
Mend
•added 2017/12/12 9:00 p.m.•2 views

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

8.2CVSS0.22098EPSS
SaveExploits0References15
Fedora
Fedora
•added 2017/12/12 1:46 p.m.•41 views

[SECURITY] Fedora 26 Update: erlang-19.3.6.4-1.fc26

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

5.9CVSS2.3AI score0.22098EPSS
SaveExploits0
Fedora
Fedora
•added 2017/12/12 11:30 a.m.•28 views

[SECURITY] Fedora 27 Update: erlang-19.3.6.4-1.fc27

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

5.9CVSS2.3AI score0.22098EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2017/12/12 12:00 a.m.•31 views

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS6.6AI score0.22098EPSS
SaveExploits0References3
OSV
OSV
•added 2017/12/12 12:00 a.m.•9 views

UBUNTU-CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS6.6AI score0.22098EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•5 views

CVE-2017-1000385: Observable Discrepancy

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

5.9CVSS6.7AI score0.22098EPSS
SaveExploits0References2
Fedora
Fedora
•added 2017/12/10 5:10 a.m.•39 views

[SECURITY] Fedora 27 Update: erlang-jiffy-0.14.13-1.fc27

A JSON parser for Erlang implemented as a NIF...

10CVSS3.3AI score0.99838EPSS
SaveExploits27
OpenVAS
OpenVAS
•added 2017/12/10 12:00 a.m.•52 views

Fedora Update for erlang-jiffy FEDORA-2017-d0a336a2a3

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.99838EPSS
SaveExploits27References2
OpenVAS
OpenVAS
•added 2017/12/10 12:00 a.m.•38 views

Fedora Update for erlang-jiffy FEDORA-2017-a20d92573b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.99838EPSS
SaveExploits27References2
Fedora
Fedora
•added 2017/12/09 10:28 p.m.•28 views

[SECURITY] Fedora 26 Update: erlang-jiffy-0.14.13-1.fc26

A JSON parser for Erlang implemented as a NIF...

10CVSS3.3AI score0.99838EPSS
SaveExploits27
OSV
OSV
•added 2017/12/08 7:42 p.m.•10 views

OPENSUSE-SU-2017:3257-1 Security update for erlang

This update for erlang fixes security issues and bugs. The following vulnerabilities were addressed: - CVE-2017-1000385: Harden against the Bleichenbacher attacher against RSA - CVE-2016-10253: Heap overflow through regular expressions bsc1030062 In addition Erlang was updated to version 18.3.4.6...

9.8CVSS8.3AI score0.22098EPSS
SaveExploits0References3
OSV
OSV
•added 2017/12/08 7:42 p.m.•10 views

OPENSUSE-SU-2017:3255-1 Security update for erlang

This update for erlang fixes security issues and bugs. The following vulnerabilities were addressed: - CVE-2017-1000385: Harden against the Bleichenbacher attacher against RSA - CVE-2016-10253: Heap overflow through regular expressions bsc1030062 In addition Erlang was updated to version 18.3.4.6...

9.8CVSS8.3AI score0.22098EPSS
SaveExploits0References3
Debian
Debian
•added 2017/12/08 6:51 a.m.•40 views

[SECURITY] [DSA 4057-1] erlang security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4057-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 08, 2017 https://www.debian.org/security/faq -...

5.9CVSS5.9AI score0.22098EPSS
SaveExploits0
Rows per page
Query Builder