libssh2 security update

CentOS Errata and Security Advisory CESA-2015:2140 Updated libssh2 packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base scor...

Cisco ASA VPN ISAKMP DoS Vulnerability (cisco-sa-20151021-asa-ike)

A vulnerability in the IKE code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Oracle Linux 7 : libssh2 (ELSA-2015-2140)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2140 advisory. - check length of data extracted from the SSHMSGKEXINIT packet CVE-2015-1782 Tenable has extracted the preceding description block directly from the Oracle Linu...

wireshark security, bug fix, and enhancement update

1.10.14-7.0.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.10.14-7 - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvblengthremaining is used - Related: CVE-2015-6244 1.10.14-6 - Security patch - Resolves: CVE-2015-3182 1.10.14-5 - Fix crash...

ssl-dh-params NSE Script

Weak ephemeral Diffie-Hellman parameter detection for SSL/TLS services. This script simulates SSL/TLS handshakes using ciphersuites that have ephemeral Diffie-Hellman as the key exchange algorithm. Diffie-Hellman MODP group parameters are extracted and analyzed for vulnerability to Logjam CVE...

CVE-2015-7940

CVE-2015-7940 (Bouncy Castle Java) : The library before 1.51 does not validate that an EC point lies on the curve, enabling an invalid-curve attack to potentially recover private keys during ECDH. Remote attackers could exploit crafted ECDH exchanges. Affected: Bouncy Castle JS, BC versions prior...

openswan: denial of service via IKE daemon restart when receiving a bad DH gx value

A flaw was discovered in the way Libreswan's IKE daemon processed IKE KE payloads. A remote attacker could send specially crafted IKE payload with a KE payload of g^x=0 that, when processed, would lead to a denial of service daemon crash...

PT-2015-6117 · Libreswan +4 · Libreswan +4

Name of the Vulnerable Software and Affected Versions: libreswan versions prior to 3.15 Openswan versions prior to 2.6.45 Description: The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon restart. This occurs when a zero DH g^x value is...

Fewer IPsec VPN Connections at Risk to Weak Diffie-Hellman

A challenge has been made against one of the conclusions in a potentially blockbuster academic paper on cryptographic weaknesses that may be the open door through which intelligence agencies are breaking encrypted connections. The paper, “Imperfect Forward Secrecy: How Diffie-Hellman Fails in...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2015-06865)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. The Cisco Adaptive Security Appliance ASA has a security vulnerability in the IKEv1 implementation. A remote attacker could cau...

PT-2015-7181 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 through 9.3 before 9.33 Cisco Adaptive Security Appliance ASA software version 8.2 before 8.25.58 Cisco Adaptive Security Appliance ASA software version 8.3 before 8.47.29 Cisco...

The vulnerability of the Mac OS X operating system, which allows a hacker to compromise security of information.

The vulnerability of the TLS protocol implementation in the Mac OS X operating system is related to errors in the key exchange process. Exploiting this vulnerability can allow a malicious actor to compromise information security remotely...

PT-2015-2972 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.45 and earlier MySQL Server versions 5.6.26 and earlier wolfSSL versions prior to 3.6.8 Description: The issue is related to errors in the code of the MySQL Server component, specifically in the encryption system. It...

CVE-2015-5887

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

Design/Logic Flaw

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

CVE-2015-5887

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data...

Apple OS X Certificate Display Handling Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X Secure Transport accepts a CertificateRequest message before a ServerKeyExchange message, which can be exploited by a remote attacker to restrict a certificate before it can be authenticated...

IKEView.exe Stack Buffer Overflow Vulnerability

IKEView.exe is a tool for checking Internet private key exchange in firewall packets. IKEView.exe does not perform proper boundary checks on user-submitted inputs, allowing an attacker to exploit the vulnerability to execute arbitrary code or conduct denial-of-service attacks...

IKEView.exe Fox beta 1 - Stack Buffer Overflow Vulnerability

IKEView.exe is vulnerable to local stack based buffer overflow when parsing an malicious internet key exchange ".elg" file. + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-CPIKEVIEW-0911.txt Vendor: ================================...

IKEView.exe R60 - Stack Buffer Overflow (PoC)

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-IKEVIEWR60-0914.txt Vendor: ================================ www.checkpoint.com http://pingtool.org/downloads/IKEView.exe Product: ==================================================...