2360 matches found
SUSE SLED12 Security Update : libssh (SUSE-SU-2014:1731-1)
This libssh update fixes the following security issue : - bsc910790: Double free on dangling pointers in initial key exchange packet CVE-2014-8132. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:0281-1)
This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...
openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)
It was discovered that OpenSSL would accept ephemeral RSA keys when using non-export RSA cipher suites. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method...
OpenSSL DHE Client Key Exchange Denial of Service (CVE-2015-1787)
A denial of service vulnerability exists in OpenSSL. The vulnerability is due to a null pointer dereference that occurs when an OpenSSL application receives and processes a Client Certificate and a crafted Client Key Exchange handshake message.A remote, unauthenticated attacker can exploit this...
MGASA-2015-0209 Updated libssh packages fix CVE-2015-3146
Updated libssh packages fix security vulnerability: libssh versions 0.5.1 and above, but before 0.6.5, have a logical error in the handling of a SSHMSGNEWKEYS and SSHMSGKEXDHREPLY package. A detected error did not set the session into the error state correctly and further processed the packet whi...
libssh 'ssh_packet_kexdh_init()' denial of service vulnerability
libssh is a C library that implements the SSH2 protocol. In versions of libssh before 0.6.5, an error in the "sshpacketkexdhinit" function src/server.c when processing SSHMSGNEWKEYS and SSHMSGKEXDHREPLY packets can be exploited to cause a denial of service...
The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure
The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure memory exhaustion and device reboot by sending specially crafted IKEv2 packets over IPv4 or IPv6...
The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure
The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted IKEv2 packets over IPv4 or IPv6...
openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)
It was discovered that OpenSSL would accept ephemeral RSA keys when using non-export RSA cipher suites. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method...
openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)
It was discovered that OpenSSL would accept ephemeral RSA keys when using non-export RSA cipher suites. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method...
libssh2: out-of-bounds read
When negotiating a new SSH session with a remote server, one of libssh2's functions for doing the key exchange kexagreemethods was naively reading data from the incoming packet and using it without doing sufficient range checks. The SSHMSGKEXINIT packet arrives to libssh2 with a set of strings,...
Cisco IOS IKEv2 DoS (cisco-sa-20150325-ikev2)
According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker can...
Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02088)
Cisco IOS is a popular Internet operating system. Cisco IOS and Cisco IOS XE have a security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages...
Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02087)
Cisco IOS is a popular Internet operating system. A security vulnerability exists in Cisco IOS and Cisco IOS XE that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages over IPv4 or IPv6...
OpenSSL 'ssl3_get_client_key_exchange' function denial of service vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in OpenSSL version 1.0.2. Due to a vulnerability within the implementation of the...
PuTTY < 0.64 Multiple Information Disclosure Vulnerabilities
The remote host has a version of PuTTY installed that is prior to 0.64. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to a failure to clear SSH-2 private key information from the memory during the saving or loading of key files to...
CentOS Update for openssl CESA-2015:0066 centos6
Check the version of openssl SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882101";...
openssl: ECDH downgrade bug fix
It was discovered that OpenSSL would perform an ECDH key exchange with a non-ephemeral key even when the ephemeral ECDH cipher suite was selected. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method than the one requested by the user...
openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK)
It was discovered that OpenSSL would accept ephemeral RSA keys when using non-export RSA cipher suites. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method...
