UBUNTU-CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

PT-2022-2075

Name of the Vulnerable Software and Affected Versions Paramiko versions prior to 2.10.1 Description The issue is related to a race condition in the write private key file function, which could allow unauthorized information disclosure due to synchronization errors when using a shared resource. Th...

Paramiko 竞争条件问题漏洞

Paramiko is a pure Python implementation of the SSHv2 protocol. It provides both client and server functionality. A security vulnerability exists in Paramiko versions prior to 2.10.1, which stems from a race condition between creation and chmod in the writeprivatekeyfile function that allows...

CVE-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

CVE-2022-0778

Disclaimer: This data contains information about vulnerable...

UBUNTU-CVE-2022-0778

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

Rambus FIPS 安全特征问题漏洞

Rambus FIPS is a portable software encryption toolkit from Rambus that allows IoT device and platform manufacturers to deploy the security they need. A security vulnerability exists in Rambus FIPS that allows an RSA private key to be efficiently computed from the public key of a TLS certificate...

CVE-2022-26355

Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...

CVE-2022-26355

Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...

Design/Logic Flaw

Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...

CVE-2022-26355

Summary: CVE-2022-26355 affects Citrix Federated Authentication Service (FAS) versions 7.17–10.6. When deployments configure the registration authority certificate’s private key to be stored in a TPM and PowerShell is used for that configuration, the private key is incorrectly stored in the Micro...

CVE-2022-26355 Citrix Federated Authentication Service (FAS)

Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...

CVE-2021-42016

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM RMC30, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RP110, RUGGEDCOM...

CVE-2021-42016

CVE-2021-42016 affects Siemens RUGGEDCOM ROS/RUGGEDCOM IOS/RUGGEDCOM ROS devices (extensive list of i800/i801/i802/i803, M2100/M2100F/M2200/M969/M969F/RMC/RMC30/RM/RS family, RSG/RSL/UI variants). A timing attack in a third‑party component could allow retrieval of the private key used to encrypt ...

PT-2022-11531 · Siemens · Ruggedcom M2100 +49

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 RUGGEDCOM i801 RUGGEDCOM i802 RUGGEDCOM i803 RUGGEDCOM M2100 RUGGEDCOM M2100F RUGGEDCOM M2200 RUGGEDCOM M2200F RUGGEDCOM M969 RUGGEDCOM M969F RUGGEDCOM RMC30 RUGGEDCOM RMC8388 versions 4.X through 5.X RUGGEDCOM RP110 RUGGEDCOM...

Citrix Federated Authentication Service (FAS) Security Update

An issue has been identified in Citrix Federated Authentication Service FAS which causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider...

CVE-2021-4076

A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys...

DEBIAN-CVE-2021-4076

A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys...

Design/Logic Flaw

A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys...

CVE-2021-4076

CVE-2021-4076 describes a vulnerability in tang, a network-based cryptographic binding server, where a flaw could lead to leakage of private keys. The entry is supported by multiple sources in the provided corpus, including NVD data (CVE-2021-4076) and Nessus references noting tang-11-1.el9 on Ce...