Lucene search
+L

13 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2026-96512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone...

7.8CVSS5.8AI score0.00132EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•16 views

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

4.3CVSS5.8AI score0.00129EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/10 12:16 a.m.•25 views

UBUNTU-CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

4.3CVSS6.1AI score0.00129EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/09 11:18 p.m.•13 views

CVE-2026-5448 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

2.3CVSS6.2AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/09 11:18 p.m.•9 views

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

2.3CVSS6.2AI score0.00129EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/09 11:18 p.m.•46 views

CVE-2026-5448 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

2.3CVSS0.00129EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/04/09 11:18 p.m.•21 views

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

4.3CVSS5.6AI score0.00129EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/04/09 11:18 p.m.•49 views

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

4.3CVSS5.6AI score0.00129EPSS
SaveExploits0
zdt
zdt
•added 2013/12/16 12:00 a.m.•232 views

PHP openssl_x509_parse() Memory Corruption Vulnerability

The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes outside of an allocated...

7.5CVSS0.4AI score0.35635EPSS
SaveExploits8
RedHat Linux
RedHat Linux
•added 2013/12/12 3:48 a.m.•21 views

php: memory corruption in openssl_x509_parse()

The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

7.5CVSS7.1AI score0.35635EPSS
SaveExploits8References4
RedHat Linux
RedHat Linux
•added 2013/12/11 4:06 p.m.•11 views

php: memory corruption in openssl_x509_parse()

The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

7.5CVSS7.1AI score0.35635EPSS
SaveExploits8References4
RedHat Linux
RedHat Linux
•added 2013/12/11 3:44 a.m.•25 views

php: memory corruption in openssl_x509_parse()

The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

7.5CVSS7.1AI score0.35635EPSS
SaveExploits8References4
RedHat Linux
RedHat Linux
•added 2013/12/11 2:34 a.m.•12 views

php: memory corruption in openssl_x509_parse()

The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

7.5CVSS7.1AI score0.35635EPSS
SaveExploits8References4
Rows per page
Query Builder