6115 matches found
CVE-2024-28869 vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GHSA-4VWX-54MW-VQFW vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: ko, gitsign, tkn-fips, vexctl, tekton-chains-fips, ko-fips, spire-server, zot, flux-source-controller, goreleaser, neuvector-sigstore-interface, falcoctl-fips, slsa-verifier, spire-server-fips, skaffold, apko, wolfictl, chainctl, kubescape, falcoctl, policy-controlle...
CVE-2024-29903 vulnerabilities
Vulnerabilities for packages: ko, gitsign, tkn-fips, vexctl, tekton-chains-fips, ko-fips, spire-server, zot, flux-source-controller, goreleaser, neuvector-sigstore-interface, falcoctl-fips, slsa-verifier, spire-server-fips, skaffold, apko, wolfictl, chainctl, kubescape, falcoctl, policy-controlle...
CVE-2024-29902 vulnerabilities
Vulnerabilities for packages: ko, gitsign, tkn-fips, vexctl, tekton-chains-fips, ko-fips, spire-server, zot, flux-source-controller, goreleaser, neuvector-sigstore-interface, falcoctl-fips, slsa-verifier, spire-server-fips, skaffold, apko, wolfictl, chainctl, kubescape, falcoctl, policy-controlle...
SUSE-SU-2024:1179-1 Security update for gnutls
This update for gnutls fixes the following issues: Security issues fixed: - CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange bsc1208143. - CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange bsc1217277. - CVE-2024-0567: Fixed an incorrect rejection of...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2024-1491)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
CVE-2024-2511 describes a denial-of-service risk in TLSv1.3 servers caused by non-default TLS configurations. Specifically, using the non-default SSL_OP_NO_TICKET option (unless early_data with default anti-replay is configured) can cause the TLS session cache to enter an incorrect state and grow...
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
OpenSSL 3.1.0 < 3.1.6 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.1.6 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the function...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2024-1512)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
OpenSSL 3.2.0 < 3.2.2 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.2.2 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the function...
OpenSSL 3.0.0 < 3.0.14 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.14 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the...