5614 matches found
GHSA-4VWX-54MW-VQFW vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: policy-controller-fips, goreleaser, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, apko, vexctl, falcoctl-fips, aactl, tkn-fips, zot, zarf, slsa-verifier, melange, spire-server-fips, ko, skaffold, policy-controller, tekton-chains-fips, ko-fips, tkn,...
CVE-2024-29903 vulnerabilities
Vulnerabilities for packages: policy-controller-fips, goreleaser, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, apko, vexctl, falcoctl-fips, aactl, tkn-fips, zot, zarf, slsa-verifier, melange, spire-server-fips, ko, skaffold, policy-controller, tekton-chains-fips, ko-fips, tkn,...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: policy-controller-fips, goreleaser, gitsign, tekton-chains, chainctl, neuvector-sigstore-interface, apko, vexctl, falcoctl-fips, aactl, tkn-fips, zot, zarf, slsa-verifier, melange, spire-server-fips, ko, skaffold, policy-controller, tekton-chains-fips, ko-fips, tkn,...
SUSE-SU-2024:1179-1 Security update for gnutls
This update for gnutls fixes the following issues: Security issues fixed: - CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange bsc1208143. - CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange bsc1217277. - CVE-2024-0567: Fixed an incorrect rejection of...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2024-1491)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
CVE-2024-2511 describes a denial-of-service risk in TLSv1.3 servers caused by non-default TLS configurations. Specifically, using the non-default SSL_OP_NO_TICKET option (unless early_data with default anti-replay is configured) can cause the TLS session cache to enter an incorrect state and grow...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
OpenSSL 3.1.0 < 3.1.6 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.1.6 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the function...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2024-1512)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
OpenSSL 3.2.0 < 3.2.2 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.2.2 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the function...
OpenSSL 3.0.0 < 3.0.14 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.14 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the...
CVE-2024-0406 vulnerabilities
Vulnerabilities for packages: wolfictl, mattermost-fips, kubescape, nuclei, zarf, k9s, vault, filebrowser, kots, chainctl, gotenberg, terragrunt...
ruby:3.1 security, bug fix, and enhancement update
An update is available for rubygem-pg, module.rubygem-mysql2, rubygem-mysql2, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an...