CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

Input validation

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2022-25718

CVE-2022-25718 is a Qualcomm WLAN cryptographic issue described across Snapdragon lineups (Auto, Connectivity, CE/IoT, Industrial IoT, etc.) where an improper check on the return value during the authentication handshake is cited as the root cause. The vulnerability affects Qualcomm closed‑source...

CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

PT-2022-17476 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A cryptographic issue exists in the WLAN due to an improper check on the return value during the authentication handshake. This issue affects various Qualcomm Snapdragon product...

PT-2022-17477 · Qualcomm · Snapdragon Connectivity +9

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified...

October 18, 2022—KB5020440 (OS Build 10240.19509) Out-of-band

None None...

October 18, 2022—KB5020439 (OS Build 14393.5429) Out-of-band

None None...

KB5020449: Out-of-band update for Windows Server 2012: October 17, 2022

KB5020449: Out-of-band update for Windows Server 2012: October 17, 2022 Summary This update includes improvements for the following: It addresses an issue that might affect some types of Secure Sockets Layer SSL and Transport Layer Security TLS connections. These connections might have handshake...

October 17, 2022—KB5020436 (OS Build 20348.1131) Out-of-band

None None...

KB5020447: Out-of-band update for Windows 8.1 and Server 2012 R2: October 17, 2022

KB5020447: Out-of-band update for Windows 8.1 and Server 2012 R2: October 17, 2022 Summary This update includes improvements for the following: It addresses an issue that might affect some types of Secure Sockets Layer SSL and Transport Layer Security TLS connections. These connections might have...

October 17, 2022 Non-security update (KB5020446) Out-of-band

None None...

October 17, 2022—KB5020438 (OS Build 17763.3534) Out-of-band

None None...

OESA-2022-1989 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

EulerOS 2.0 SP5 : golang (EulerOS-SA-2022-2439)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack...

Security Advisory 2022-10-04-1 - wolfSSL buffer overflow during a TLS 1.3 handshake (CVE-2022-39173)

DESCRIPTION In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow on server during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow in the TLSXConnectionIDParse function in dtls.c and the DoTls13ClientHello function in tls13.c. A server is vulnerable only when --enable-session-ticket is set and TLS 1.3 is in use. Under those conditions, a malicious...

CVE-2022-39173

CVE-2022-39173 affects wolfSSL prior to 5.5.1. The issue arises during a TLS 1.3 handshake when a resumed session is abused: a malicious client triggers a Hello Retry Request, and two Client Hello messages are exchanged, each listing duplicate cipher suites, causing a buffer overflow in the wolfS...

PT-2022-24791 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.5.1 Description: The issue occurs when malicious clients cause a buffer overflow during a TLS 1.3 handshake, specifically when an attacker supposedly resumes a previous TLS session. This happens when a Hello Retry...

CVE-2022-39173

In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list ...