4121 matches found
PT-2026-4945
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.3 through 3.6 Description A TLS 1.3 connection utilizing certificate compression can be manipulated to allocate a substantial buffer prior to decompression, bypassing the configured certificate size limit. This can lead to...
PT-2026-2480
Name of the Vulnerable Software and Affected Versions Go net/url package affected versions not specified Description The net/url package does not limit the number of query parameters, potentially leading to excessive memory consumption when parsing large URL-encoded forms with many unique query...
SUSE CVE-2024-56128
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...
GHSA-P7C9-8XX8-H74F Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...
cpython: python: Memory race condition in ssl.SSLContext certificate store methods
A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...
Improper (D)TLS key boundary enforcement
...
CVE-2024-5288
...
CVE-2024-5814
...
The vulnerability of the TLS processing function in Cisco Firepower Threat Defense’s microprogramming system allows a attacker to induce a service failure.
The vulnerability of the TLS processing function in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to the use of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect page reference count in the kTLS transport handling code in the net/mlx5e driver, which could...
The vulnerability of the implementation of the mTLS protocol in the Keycloak software for managing identity and access control allows a perpetrator to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the mTLS protocol implementation in the Keycloak identity and access management software is related to a certificate authentication error. Exploiting this vulnerability could allow an attacker to circumvent security restrictions and gain unauthorized access to protected...
Vulnerabilities of components of Linux operating system’s kernel/tls modules, allowing attackers to cause service interruptions
The vulnerability of Linux operating system kernel’s net/tls components arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset the maximum negotiable TLS version is mishandled.
...
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
...
The vulnerability in the implementation of TLS and SSL protocols in Cisco Nexus Dashboard Orchestrator (NDO) allows a perpetrator to disclose protected information.
The vulnerability of the TLS and SSL protocol implementations in Cisco Nexus Dashboard Orchestrator NDO relates to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Astra Linux – Vulnerability in Python 3.11
A vulnerability was discovered in Python before version 3.8.18, 3.9.x before version 3.9.18, 3.10.x before version 3.10.13, and 3.11.x before version 3.11.5. This vulnerability primarily affects servers such as HTTP servers that use TLS client authentication. When a TLS server-side socket is...
SUSE CVE-2024-53091
In the Linux kernel, the following vulnerability has been resolved: bpf: Add skisinet and ISICSK check in tlsswhasctxtx/rx As the introduction of the support for vsock and unix sockets in sockmap, tlsswhasctxtx/rx cannot presume the socket passed in must be ISICSK. vsock and afunix sockets have...
The vulnerability of the set_verify_callback() function in the Icinga accessibility monitoring system allows a hacker to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary commands.
The vulnerability of the setverifycallback function in the Icinga accessibility monitoring system is related to errors in the TLS certificate validation process. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions, gain unauthorized access to protected...
The vulnerability of the tls component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the tls component in the Linux operating system’s kernel is related to improper blocking of resources in the tlsswrecvmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Red Hat Keycloak 安全漏洞
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak, which arises from a reverse proxy that does not use TLS delivery termination and has mTLS...