Denial Of Service (DoS)

Linux kernel is vulnerable to NULL pointer dereference vulnerability. This occurs in the Key Management sub component in Linux kernel when trying to issue a KEYTCLREAD on a negative key. Local attackers could cause a denial of service conditions via a crafted KEYCTLREAD operation...

The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 series routers, related to errors in SSH credentials, allows a hacker to elevate their privileges to the root level.

The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 series routers is related to errors in SSH key management. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root status by establishing an SSH connection via IPv6...

CVE-2019-1731

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

CVE-2019-1731

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

Design/Logic Flaw

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

CVE-2019-1731

Summary of CVE-2019-1731 (Cisco NX-OS SSH Key Information Disclosure) : A vulnerability in the SSH CLI key management of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user’s private SSH key to all authenticated users on the targeted device. The issue stems from inc...

CVE-2019-1731 Cisco NX-OS Software SSH Key Information Disclosure Vulnerability

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1530)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The acpismbushcadd function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1...

CVE-2019-1804

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...

Design/Logic Flaw

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...

CVE-2019-1804

CVE-2019-1804 affects Cisco Nexus 9000 Series fabric switches running NX-OS in ACI Mode. The root cause is a default SSH key pair present on devices, enabling an unauthenticated, remote attacker to gain root privileges by connecting over IPv6 with the extracted keys. Impact is full system comprom...

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged us...

Privilege Escalation

The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged us...

Integer Overflow

The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged us...

CVE-2019-4143

The IBM Cloud Private Key Management Service IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348...

Code injection

The IBM Cloud Private Key Management Service IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348...

CVE-2019-4143

The CVE-2019-4143 issue affects IBM Cloud Private before patches: IBM Cloud Private Key Management Service (KMS) in versions 3.1.1 and 3.1.2 can allow a local attacker to obtain sensitive information from the KMS plugin container log. Root cause involves information disclosure via container logs ...

CVE-2019-4143

The IBM Cloud Private Key Management Service IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348...

The vulnerability of the implementation of the Digital Signature Algorithm (DSA) in the OpenSSL library allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Digital Signature Algorithm implementation in the OpenSSL library is related to errors in managing cryptographic keys. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by recovering the secret...