CVE-2020-36316

In RELIC before 2021-04-03, there is a buffer overflow in PKCS1 v1.5 signature verification because garbage bytes can be present...

CVE-2020-36315

In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...

relic:cryptofuzz-relic: Heap-buffer-overflow in dv_zero

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5635118176206848 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasanrelic Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

Malware in new-relic-browser

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in new-relic-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7976 Malicious code in new-relic-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, prometheus-beat-exporter-fips, conftest, prometheus-stackdriver-exporter, src-fingerprint, kubernetes-dashboard-metrics-scraper, confluent-common-docker, thanos, harbor-scanner-trivy-fips, shfmt, chainctl, frp, kubewatch,...

relic:cryptofuzz-relic: Crash in SHA224Result

Detailed Report: https://oss-fuzz.com/testcase?key=6313277903667200 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasani386relic Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x57409cc5 Crash State: SHA224Result mdmapsh224 stack Sanitizer:...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: vexctl, direnv, sbomqs, thanos-operator, nri-nginx, nri-prometheus, docker-cli, yam, nri-mssql, gh, cfssl, pulumi-language-yaml, eksctl, go-bindata, grafana-operator, vite, nri-mongodb, kubebuilder, kube-logging-operator, docker-credential-gcr, prometheus-operator,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: vexctl, direnv, sbomqs, thanos-operator, nri-nginx, nri-prometheus, docker-cli, yam, nri-mssql, gh, cfssl, pulumi-language-yaml, eksctl, go-bindata, grafana-operator, vite, nri-mongodb, kubebuilder, kube-logging-operator, docker-credential-gcr, prometheus-operator,...

This Week in Spring - March 5th, 2024

Hi, Spring fans! Welcome to another exciting roundup of This Week in Spring! I expect many of you are reading this for the first time, especially with Facebook and Instagram being down. People have been exploring all the other lesser-known corners of the web, looking for their daily "doom scroll....

This Week in Spring - February 20th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 20th of February, 2024? I'm doing alright on this rainy 20th of Feburary here in San Francisco, and I hope you are too! We've got a ton of things to get into this week so let's dive right into it! Have y...

Information disclosure

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

PT-2024-14331 · Relic · Relic-Toolkit

Name of the Vulnerable Software and Affected Versions: Relic relic-toolkit version 0.6.0 Description: An issue in the cp bbs sig function allows a remote attacker to obtain sensitive information and escalate privileges. The issue is located in the relic/src/cp/relic cp bbs.c file of the Relic...

RELIC Security Vulnerabilities

RELIC is a modern research cryptography meta-toolkit open-sourced by relic-toolkit that emphasizes efficiency and flexibility. A security vulnerability exists in RELIC version 0.6.0. A remote attacker can exploit this vulnerability to obtain sensitive information and escalate privileges via the...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939

Relic relic-toolkit 0.6.0 is affected by CVE-2023-51939 due to a flaw in the cp_bbs_sig function in relic_cp_bbs.c. The vulnerability enables a remote attacker to obtain sensitive information and escalate privileges via cp_bbs_sig. Connected sources consistently reference the vulnerable function ...