Lucene search
+L

128 matches found

OpenVAS
OpenVAS
added 2019/04/08 12:00 a.m.166 views

Apache HTTP Server < 2.4.39 mod_ssl Access Control Bypass Vulnerability - Linux

In Apache HTTP Server a bug in modssl when using per-location client certificate verification with TLSv1.3 allowed a client supporting Post-Handshake Authentication to bypass configured access control restrictions. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpte...

7.5CVSS7.6AI score0.10689EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/01 3:29 p.m.25 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
SaveExploits1References8
OSV
OSV
added 2019/04/01 3:29 p.m.7 views

DEBIAN-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.8AI score0.03401EPSS
SaveExploits1References1
Prion
Prion
added 2019/04/01 3:29 p.m.25 views

Null pointer dereference

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

5CVSS7.4AI score0.03401EPSS
SaveExploits1References8Affected Software3
Debian CVE
Debian CVE
added 2019/04/01 2:16 p.m.37 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2019/04/01 2:16 p.m.61 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2019/04/01 12:00 a.m.41 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
SaveExploits1References3
Apache Httpd
Apache Httpd
added 2019/01/23 12:00 a.m.128 views

Apache Httpd < 2.4.39 : mod_ssl access control bypass

In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in modssl when using per-location client certificate verification with TLSv1.3 allowed a client supporting Post-Handshake Authentication to bypass configured access control restrictions...

7.5CVSS1.7AI score0.10689EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder