EUVD-2026-70670

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...

Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-69247, CVE-2026-69248, CVE-2026-69249)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to...

openSUSE 16 Security Update : python-cryptography (openSUSE-SU-2026:21685-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21685-1 advisory. - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. -...

librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...

Security update for python-cryptography (moderate)

openSUSE security update: security update for python-cryptography ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21685-1 Rating: moderate References: bsc1273516 bsc1273549 bsc1273551 Cross-References: CVE-2026-69247 CVE-2026-69248 CVE-2026-69249 CV...

SUSE-SU-2026:23404-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

OPENSUSE-SU-2026:21685-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

CVE-2026-69247

A flaw was found in cryptography, a Python package for cryptographic primitives. This vulnerability, known as a Bleichenbacher oracle, arises during PKCS7 EnvelopedData decryption. An attacker can exploit distinguishable error messages and timing differences during decryption to gain information...

CVE-2026-13586

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting an iteration-count bound issue in the PKCS12 Message Authentication Code MAC and bag-decryption Key Derivation Function KDF. This could make the affected system...

CVE-2026-15055

A flaw was found in Bouncy Castle for Java. An attacker could exploit this vulnerability by providing a specially crafted input to the PKCS8 / PBES2 decryptors. This input could specify an excessively high Key Derivation Function KDF cost, causing the decryptor to consume significant computationa...

Astra Linux – Vulnerability in gnutls28

A vulnerability has been discovered in gnutls. This security flaw occurs due to a double-free error that occurs during the verification of pkcs7 signatures in the gnutlspkcs7verify function...

Astra Linux – Vulnerability in opensc

A vulnerability was discovered in the pkcs15-init tool in OpenSC. An attacker could use a specially crafted USB Device or Smart Card, which would send a specially crafted response to APDUs to the system. When buffers are partially filled with data, the initialized parts of the buffer can be...

Astra Linux – Vulnerability in OpenSSL

Issue summary: Processing a malformed PKCS12 file can lead to a NULL pointer dereference in the PKCS12itemdecryptd2iex function. This can cause a crash, resulting in a Denial of Service for applications processing PKCS12 files. Impact summary: A NULL pointer dereference can trigger a crash, leadi...

Astra Linux – Vulnerability in OpenSSL

The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally by OpenSSL to support SMIME, CMS, and PKCS7 streaming capabilities. However, it can also be called directly by end-user applications. This function receives a BIO from...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. The gnutlspkcs11tokensetpin function, which is used to change the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

Astra Linux – Vulnerability in OpenSSL

Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...

Astra Linux – Vulnerability in nss

The NSS code used for checking PKCS1 v1.5 was leaking information useful for launching Bleichenbacher-style attacks. Both the overall correctness of the padding and the length of the encrypted message were exposed through timing side-channels. By sending a large number of ciphertexts selected by...

Astra Linux – Vulnerability in OpenSSH

The PKCS11 feature in ssh-agent in OpenSSH prior to version 9.3p2 has an insufficiently trustworthy search path, which can lead to remote code execution if the agent is forwarded to a system controlled by an attacker. The code located in /usr/lib is not necessarily safe for loading into ssh-agent...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...