CVE-2023-0466

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

CVE-2023-0466

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

CVE-2023-0466 Certificate policy check not enabled

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

CVE-2023-0466

CVE-2023-0466 relates to OpenSSL where X509_VERIFY_PARAM_add0_policy() does not enable the policy check, allowing certificates with invalid policies to bypass verification. The issue is mitigated by enabling policy checks via X509_VERIFY_PARAM_set1_policies() or X509_V_FLAG_POLICY_CHECK, and has ...

OpenSSL 3.0.0 < 3.0.9 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.9 advisory. - The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate...

K15460: OpenSSL Vulnerability CVE-2011-4109

Security Advisory Description Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check. CVE-2011-4109 Impact This vulnerability could allow a remote attacker to...

SUSE CVE-2011-4109

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check...

GSD-2022-1006210 xfrm: fix refcount leak in __xfrm_policy_check()

xfrm: fix refcount leak in xfrmpolicycheck This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.292 by commit...

GSD-2022-1005952 xfrm: fix refcount leak in __xfrm_policy_check()

xfrm: fix refcount leak in xfrmpolicycheck This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...

GSD-2022-1005764 xfrm: fix refcount leak in __xfrm_policy_check()

xfrm: fix refcount leak in xfrmpolicycheck This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

PT-2022-34210 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: The issue is related to a refcount leak in the xfrm policy check function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

GSD-2022-1005463 xfrm: fix refcount leak in __xfrm_policy_check()

xfrm: fix refcount leak in xfrmpolicycheck This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

PT-2022-33318 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to a refcount leak in the xfrm policy check function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

GHSA-7V5V-9V8R-W864 Inadequate Encryption Strength in Apache CXF

Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic...

GHSA-GRC3-8Q8M-4J7C Improper privilege handling in Apache Accumulo

Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 toc Vulnerability profile Vulnerabilit...

kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message

The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...

Microsoft Windows: Devices: Allowed to format and eject removable media

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windevicesformatejectremovable.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Devices: Allowed to format and eject removable media Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Cisco IOS Compliance Check: Passes

Lists all the Cisco IOS Compliance Policy Check which passed it. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SSL/TLS: Policy Check

This VT is running SSL/TLS Policy Checks. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105778"...