CVE-2013-7469

CVE-2013-7469 affects Seafile up to version 6.2.11, where the same Initialization Vector is reused in CBC mode to encrypt private data. This IV reuse enables chosen-plaintext or dictionary attacks against confidentiality. The primary sources note the vulnerability but do not provide a published p...

Amazon Linux AMI : ruby23 (ALAS-2017-880)

IV Reuse in GCM Mode : The openssl gem for Ruby uses the same initialization vector IV in GCM Mode aes--gcm when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism. CVE-2016-7798 C Tenable Network Security, Inc. The...

Medium: ruby23

Issue Overview: IV Reuse in GCM Mode: The openssl gem for Ruby uses the same initialization vector IV in GCM Mode aes--gcm when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism. CVE-2016-7798 Affected Packages: ruby2...

Fedora 24 : ruby (2017-f16ba664e7)

Fix IV Reuse in GCM Mode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...