CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

UBUNTU-CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

PT-2021-3242 · Lasso +9 · Lasso +9

Name of the Vulnerable Software and Affected Versions: Lasso versions prior to 2.7.0 Description: The issue is related to improper management of privileges in the Lasso library, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected...

Lasso 数据伪造问题漏洞

Lasso is an eBay open source Node.js-style JavaScript module bundler. The tool offers many different optimizations such as bundling, code splitting, delayed loading, conditional dependencies, and more. A security vulnerability exists in Lasso SAML, which is formed from improper privilege manageme...

lasso bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

lasso bug fix and enhancement update

An update is available for lasso. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Lasso get_or_define_ns Function Denial of Service Vulnerability

Lasso is a free software library built on top of libxml2, XMLSec and OpenSSL. A security vulnerability exists in the 'prefex' variable of the getordefinens function in Lasso. A remote attacker could exploit this vulnerability to cause a denial of service uninitialized memory access and applicatio...

Design/Logic Flaw

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

DEBIAN-CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

UBUNTU-CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

CVE-2015-1783

The CVE-2015-1783 entry concerns the Lasso library. The root cause is a flaw in the get_or_define_ns function where the prefix variable can lead to uninitialized memory access, enabling a remote attacker to trigger a denial of service via unspecified vectors, resulting in an application crash. Th...

CVE-2015-1783

The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...

Fedora Update for lasso FEDORA-2015-4821

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : lasso-2.4.1-3.fc22 (2015-4821)

Security fix for CVE-2015-1783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 22 Update: lasso-2.4.1-3.fc22

Lasso is a library that implements the Liberty Alliance Single Sign On standards, including the SAML and SAML2 specifications. It allows to handle the whole life-cycle of SAML based Federations, and provides bindings for multiple languages...

Fedora Update for lasso FEDORA-2015-4807

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...