Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

...

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

...

CVE-2024-20662: Access of Resource Using Incompatible Type

Windows Online Certificate Status Protocol OCSP Information Disclosure Vulnerability...

CVE-2024-20655: Use After Free

Microsoft Online Certificate Status Protocol OCSP Remote Code Execution Vulnerability...

curl: CVE-2024-0853: OCSP verification bypass with TLS session reuse

A vulnerability was identified in cURL version 8.5.0 that allowed revoked certificates to be accepted when reusing a TLS session. The issue was caused by a correction that inadvertently skipped OCSP stapling verification during TLS session reuse. This allowed revoked certificates to be accepted i...

openssl: Possible DoS translating ASN.1 object identifiers

A flaw was found in OpenSSL resulting in a possible denial of service while translating ASN.1 object identifiers. Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience long delays when...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-3075)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unable to update certificate. Error "Certificate is referenced by a CRL, OCSP responder, vserver...)

Getting error "Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or XMLDECRYPT " when trying to update the existing certificate...

Important: firefox

Issue Overview: Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough...

Updating certificate on NetScaler failed with error

The following error occurs when updating a certificate on the NetScaler appliance. ERROR: Certificate is referenced by a CRL, OCSP responder, vserver, service, monitor, SSL profile, CA Cert Group, another certificate, or a policy expression using XMLENCRYPT or XMLDECR...

wolfssl:fuzzer-wolfssl-ocsp: Stack-buffer-overflow in GenerateDNSEntryRIDString

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6711770570686464 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-ocsp Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address...

CVE-2023-35313

Windows Online Certificate Status Protocol OCSP SnapIn Remote Code Execution Vulnerability...

Remote code execution

Windows Online Certificate Status Protocol OCSP SnapIn Remote Code Execution Vulnerability...

CVE-2023-35313 Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

...

CVE-2023-35313 Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

...

CVE-2023-35313

CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

...

CVE-2023-35313: Use After Free

Windows Online Certificate Status Protocol OCSP SnapIn Remote Code Execution Vulnerability...

Medium: openssl11

Issue Overview: Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may...

F5 Networks BIG-IP : BIG-IP SSL OCSP Authentication profile vulnerability (K56412001)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K56412001 advisory. - In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before...