Dream Security PKI安全漏洞

Dream Security PKI is a security solution from Dream Security, a South Korean company. A security vulnerability exists in Dream Security PKI that originates. The vulnerability is caused due to insufficient validation of authorization certificates. An attacker can exploit the vulnerability can...

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic.

...

Podcast: Why Securing Active Directory Is a Nightmare

This week, Microsoft rushed out a fix for a Windows NT LAN Manager exploit dubbed “PetitPotam” that forces remote Windows systems to reveal password hashes that can be easily cracked. The frenzy begs the question: Why is securing Microsoft Active Directory AD such a nightmare? When security...

CVE-2021-0281

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

UBUNTU-CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic...

The vulnerability of the `p11_rpc_buffer_get_byte_array` function in the library for working with PKCS P11-kit modules lies in the reading of data beyond the buffer’s allowed limits, allowing an attacker to access confidential data.

The vulnerability of the p11rpcbuffergetbytearray function in the library for working with PKCS P11-kit modules is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

CVE-2021-0281

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. that is specific to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to a code issue that stems from the use of a resource publ...

Nextcloud 信任管理问题漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. The Nextcloud Android Client prior to version 3.16.1 is vulnerable to a trust management issue that stems from the Nextcloud Android Client skipping a step th...

Fedora: Security Advisory for pki-core (FEDORA-2021-54a73a7112)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for dogtag-pki (FEDORA-2021-99ca984f32)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: pki-core-10.10.6-1.fc33

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

[SECURITY] Fedora 34 Update: dogtag-pki-10.10.6-1.fc34

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

[SECURITY] Fedora 34 Update: pki-core-10.10.6-1.fc34

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

SUSE: Security Advisory (SUSE-SU-2019:1059-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:14031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...

Linux Nettle 输入验证错误漏洞

Linux Nettle is an American open source application for Linux. Contains a design that lends itself easily to a low-level cryptographic library in many cases. An input validation error vulnerability exists in Linux Nettle, which stems from the way the RSA decryption function improperly handles...

Vulnerability fixed in Red Hat Enterprise Linux

Red Hat has fixed a vulnerability in the Public Key Infrastructure PKI Core package. A component of this package writes out the administrator password during installation to a log file that is unjustifiably readable by any local user. A local malicious person with knowledge of the location of thi...