CVE-2022-1249

CVE-2022-1249 : A NULL pointer dereference flaw in pesign’s cms_set_pw_data() (cms_common.c) fails to handle NULL pwdata invoked from daemon.c, causing a crash when daemonizing pesign. This is documented across multiple sources (NVD entry, MSN/OSV/Debian security tracker, Nessus, etc.). The vulne...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

PT-2022-13748 · Pesign +1 · Pesign +1

Name of the Vulnerable Software and Affected Versions: pesign affected versions not specified Description: A NULL pointer dereference flaw was found in pesign's cms set pw data function of the cms common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to...

RedHat pesign 代码问题漏洞

pesign is a tool for signing PE-COFF binaries, and is expected to be at least vaguely compliant with the PE and Authenticode specifications. A security vulnerability exists in pesign that stems from the inability of the cmssetpwdata function in the cmscommon.c file to handle NULL pwdata calls fro...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

Fedora: Security Advisory for pesign (FEDORA-2022-dc6e2e350b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: pesign-115-1.fc36

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

Mageia: Security Advisory (MGASA-2022-0114)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated pesign packages fix security vulnerability

Fix potential DoS in pesign daemon...

MGASA-2022-0114 Updated pesign packages fix security vulnerability

Fix potential DoS in pesign daemon...

Fedora: Security Advisory for pesign (FEDORA-2022-32c39ab8c0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for pesign (FEDORA-2022-e0c366b141)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: pesign-113-18.fc35

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

[SECURITY] Fedora 34 Update: pesign-113-18.fc34

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

openSUSE Security Update : gnu-efi / pesign / shim (openSUSE-2015-48)

shim was updated to fix several security issues. - OOB read access when parsing DHCPv6 packets remote DoS CVE-2014-3675. - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE CVE-2014-3676. - Memory corruption when processing user provided MOK lists CVE-2014-3677...