833 matches found
Code injection
Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...
CVE-2016-1919
The CVE-2016-1919 entry concerns Samsung KNOX 1.0 on Android 4.3 where the eCryptFS key is derived from the user password and a TIMA key. The weakness lies in the eCryptFS-key generation algorithm, enabling potential disclosure of Data-at-Rest from KNOX containers when an attacker has local acces...
Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file
Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...
Security advisory YSA-2017-01 | Yubico
Description not found...
NIST Calls for Submissions to Secure Data Against Quantum Computing
For a layman, it may be difficult to fathom how a standards body could be playing catch-up to a threat that could be at least a decade away. But that’s the position NIST finds itself in with the risk that quantum computers pose to existing cryptographic algorithms. Working, practical quantum...
GnuPG: RNG output is predictable
Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Description A long standing bug since 1998 in Libgcrypt see “GLSA 201610-04” below and GnuPG allows an attacker to predict the output from the standard RNG. Please review the “Entropy Loss...
py-cryptography -- vulnerable HKDF key generation
Alex Gaynor reports: Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize...
OpenSSL has an unspecified vulnerability (CNVD-2016-02810)
OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...
CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
DEBIAN-CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
CVE-2000-1254
OpenSSL CVE-2000-1254: A vulnerability in crypto/rsa/rsa_gen.c where C bitwise-shift operations that exceed the size of an expression are mishandled, enabling a remote attacker on 64-bit HP-UX to defeat cryptographic protections. Affected: OpenSSL versions before 0.9.6. Impact: potential plaintex...
CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
[SECURITY] Fedora 23 Update: python-rsa-3.4.1-1.fc23
Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...
SUSE SLED11 / SLES11 Security Update : libssh2_org (SUSE-SU-2016:0723-1)
This update for libssh2org fixes the following issues : - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 - Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. Note...
SUSE-SU-2016:0723-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys...
SUSE-SU-2016:0718-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: Security issue fixed: - CVE-2016-0787 bsc967026: Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added: - Support of SHA256 digests for DH...
Fedora 22 : prosody-0.9.10-1.fc22 (2016-e2c5111eda)
Prosody 0.9.10 ============== A summary of changes in this release: Security -------- moddialback: Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks CVE-2016-0756 Fixes and improvements ---------------------- Startup: Open /dev/urandom read-only, to fix a failure to...