GSD-2021-1001566 crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

crypto: ccp - fix resource leaks in ccprunaesgcmcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.209 by commit...

GSD-2021-1001538 crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

crypto: ccp - fix resource leaks in ccprunaesgcmcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

PT-2021-30068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. It was introduced in version v4.12 and fixed in version v5.4.151. The actual impact and attack plausibility have not ye...

PT-2021-30003

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. This problem was introduced in version v4.12 and is fixed in Linux Kernel version v5.14.10. The actual impact and attac...

PT-2021-30031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26208

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.12 and fixed in...

PT-2021-26008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-26036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-26129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30124

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.12 and fixed in Lin...

PT-2021-26073

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

GHSA-WQGP-VPHW-HPHF Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

Use of a Broken or Risky Cryptographic Algorithm

A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM and other AEAD ciphers such as AES-GCM-SIV or XChaCha20Poly1305 used by the SDKs to encrypt messages, an attacker can craft a...

MGASA-2021-0452 Updated apache-mod_auth_openidc packages fix security vulnerability

In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and leads to an Open Redirect vulnerability in the logout functionality. CVE-2021-32786 In modauthopenidc before version 2.4.9, the AES GCM encrypti...

Updated apache-mod_auth_openidc packages fix security vulnerability

In versions prior to 2.4.9, oidcvalidateredirecturl does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and leads to an Open Redirect vulnerability in the logout functionality. CVE-2021-32786 In modauthopenidc before version 2.4.9, the AES GCM encrypti...

The vulnerability of the ccp_run_aes_gcm_cmd() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ccprunaesgcmcmd function in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2021-36218

An issue was discovered in SKALE sgxwallet 1.58.3. sgxdispippsAESGCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0...

UBUNTU-CVE-2021-3764

A memory leak flaw was found in the Linux kernel's ccprunaesgcmcmd function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability...