373 matches found
SUSE CVE-2026-50722
Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v15 RFC 8017. A remote attacker can use a variation on the Bleichenbacher attack to forge the AUTH payload...
AZL-91773 CVE-2026-50721 affecting package libreswan for versions less than 4.15-2
Libreswan, via the function RSAauthenticatehashsignaturerawrsa, did not correctly verify the length of the authentication hash when the SIG payload of an IKEv1 packet was encoded using PKCS 1 RSA Encryption as per RFC 2313. A remote attacker can use a variation on the Bleichenbacher attack to for...
UBUNTU-CVE-2026-50722
Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v15 RFC 8017. A remote attacker can use a variation on the Bleichenbacher attack to forge the AUTH payload...
CVE-2026-50722
Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v15 RFC 8017. A remote attacker can use a variation on the Bleichenbacher attack to forge the AUTH payload...
CVE-2024-47856
In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve tha...
EUVD-2024-55101
In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve tha...
CVE-2024-47856
The RSA Authentication Agent before version 7.4.7 is vulnerable to a path interception issue (CWE-23) affecting service paths and shortcut paths. If a path contains one or more spaces and lacks surrounding quotation marks, an adversary can place a malicious executable in a higher-level directory....
CVE-2024-47856: Relative Path Traversal
In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve tha...
RSA Authentication Agent 安全漏洞
RSA Authentication Agent is a remote access request authentication software from RSA Corporation. A security vulnerability exists in RSA Authentication Agent versions prior to 7.4.7 that stems from a path interception issue that could lead to the execution of an unexpected executable file...
EUVD-2019-13346
Malware in sbrugna...
EUVD-2020-26521
Malware in sbrugna...
EUVD-2005-1121
Malware in sbrugna...
EUVD-2017-16970
Malware in sbrugna...
EUVD-2018-11887
Malware in sbrugna...
EUVD-2014-0654
Malware in sbrugna...
EUVD-2012-2279
Malware in sbrugna...
EUVD-2016-0912
Malware in sbrugna...
EUVD-2018-11866
Malware in sbrugna...