Linux Distros Unpatched Vulnerability : CVE-2014-3570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BNsqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which...

bignum-fuzzer:fuzzer_openssl_go_no_negative_num_len_1200_all_operations: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4855278512701440 Project: bignum-fuzzer Fuzzing Engine: libFuzzer Fuzz Target: fuzzeropensslgononegativenumlen1200alloperations Job Type: libfuzzerasanbignum-fuzzer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000f718 Crash...

libressl:cryptofuzz: Heap-buffer-overflow in BN_bn2mpi

Project: https://github.com/libressl-portable/portable.git https://github.com/libressl/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5134888744321024 Project: libressl Fuzzing Engine: afl Fuzz Target: cryptofuzz Job Type: aflasanlibressl Platform Id: linux Crash Type:...

new packages: perl-Crypt-OpenSSL-Bignum

An update is available for perl-Crypt-OpenSSL-Bignum. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...