Exploit for CVE-2017-15361

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361...

Exploit for CVE-2017-15361

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361...

Infineon RSA Library Cryptographic Security Bypass Vulnerability

The Infineon Trusted Platform Module TPM is a data encryption chip from Infineon Technologies, Germany.The Infineon RSA library is one of the encryption libraries. A security vulnerability exists in the Infineon RSA library version 1.02.013 of the Infineon TPM, which does not properly handle RSA...

SSL Certificate Contains Weak RSA Key (Infineon TPM / ROCA)

At least one of the X.509 certificates sent by the remote host has an RSA key that appears to be generated improperly, most likely by a TPM Trusted Platform Module produced by Infineon Technologies. A third party may be able to recover the private key from the certificate's public key. This may...

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2017-15361: Undefined Security Weakness

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2015-8559

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages...

CVE-2015-8559

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages...

CVE-2015-8559

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages...

CVE-2015-8559

Removed by vendor...

PT-2017-7436

Name of the Vulnerable Software and Affected Versions Chef Infra client versions prior to 15.4.45 Description The issue concerns the knife bootstrap command in Chef Infra client, which leaks the validator.pem private RSA key to /var/log/messages. Recommendations For versions prior to 15.4.45,...

gnutls security, bug fix, and enhancement update

3.3.26-9 - Address crash in OCSP status request extension, by eliminating the unneeded parsing CVE-2017-7507, 1455828 3.3.26-7 - Address interoperability issue with 3.5.x 1388932 - Reject CAs which are both trusted and blacklisted in trust module 1375303 - Added new functions to set issuer and...

Design/Logic Flaw

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of messages. However, the private RSA key is not only stored on the client but transmitted to the backen...

PT-2017-11770

Name of the Vulnerable Software and Affected Versions heinekingmedia StashCat versions 1.7.5 and earlier for Android heinekingmedia StashCat versions 0.0.80w and earlier for Web heinekingmedia StashCat versions 0.0.86 and earlier for Desktop Description The issue concerns the use of RSA for...

SUSE-SU-2017:1794-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added bsc1046607...

SUSE-SU-2017:1793-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening a against local side-channel attack in RSA key handling has been added bsc1046607...

PT-2017-3251

Name of the Vulnerable Software and Affected Versions libgcrypt versions prior to 1.7.8 Description The issue is related to a cache side-channel attack that can lead to a complete break of RSA-1024 and potentially RSA-2048 with increased computation. This attack requires the ability to run...

USN-3301-1 strongswan vulnerabilities

It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2017-9022 It was discovered that strongSwan incorrectly parsed ASN.1 CHOICE types. A remote attacker...

Private RSA Key Disclsoure

math/big in github.com/golang/go allows attackers to obtain private RSA keys. These can be obtained due to a flaw in the Int.Exp Montgomery code when carrying propagation...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel key management subsystem in which a local attacker could crash the kernel or corrupt the stack and addition...