PT-2019-12999

Name of the Vulnerable Software and Affected Versions LinOTP versions prior to 2.10.5.3 Description The issue allows for a replay attack when automatic resynchronization is enabled for the TOTP token type, potentially enabling an attacker to log in with previously recorded OTP values. This attack...

Updated kernel-tmb packages fixes security vulnerabilities

This kernel update provides the upstream 4.14.119 that adds the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. To complete the mitigatio...

Authentication Bypass

tomcat6 is vulnerable to authentication bypass. The vulnerability exists through the ability to perform replay attacks after a nonce becomes stale...

openSUSE Security Update : ceph (openSUSE-2019-1284)

This update for ceph version 13.2.4 fixes the following issues : Security issues fixed : - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety bsc1111177 - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon bsc1099162 - CVE-2018-1128: Fixed signature check bypass i...

openSUSE: Security Advisory for ceph (openSUSE-SU-2019:1284-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1284-1 Security update for ceph

This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety bsc1111177 - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon bsc1099162 - CVE-2018-1128: Fixed signature check bypass in...

EulerOS Virtualization 2.5.3 : nss (EulerOS-SA-2019-1169)

According to the version of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A...

CVE-2018-15498

YSoft SafeQ Server 6 allows a replay attack...

CVE-2018-15498

YSoft SafeQ Server 6 allows a replay attack...

Design/Logic Flaw

YSoft SafeQ Server 6 allows a replay attack...

CVE-2018-15498

YSoft SafeQ Server 6 allows a replay attack...

CVE-2018-15498

Technical details about CVE-2018-15498 are not provided in the connected documents. The entries only reiterate the replay-attack description for YSoft SafeQ Server 6. Monitor for official advisories and patch information.

CVE-2018-15498: Authentication Bypass by Capture-replay

YSoft SafeQ Server 6 allows a replay attack...

PT-2019-9112

Name of the Vulnerable Software and Affected Versions YSoft SafeQ Server version 6 Description The issue allows a replay attack. Recommendations For YSoft SafeQ Server version 6, at the moment, there is no information about a newer version that contains a fix for this issue...

Replay Attack

http-auth is vulnerable to replay attack. The vulnerability exists because it is not properly invalidate expired Nonce in validateNonce and allows the replay attack when the client specifies a large nonceCount value...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2019:0586-1)

This update for ceph version 13.2.4 fixes the following issues : Security issues fixed : CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety bsc1111177 CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon bsc1099162 CVE-2018-1128: Fixed signature check bypass in ceph...

CVE-2019-9659

CVE-2019-9659 affects the Chuango 433 MHz burglar-alarm product line, where static RF remote codes enable replay-based arming, disarming, or triggering the alarm. The NVD description confirms the vulnerability stems from fixed code sequences used by the remote controls, allowing an attacker to re...

PT-2019-19783

Name of the Vulnerable Software and Affected Versions Chuango 433 MHz burglar-alarm product line affected versions not specified Eminent EM8617 OV2 Wifi Alarm System affected versions not specified Description The issue concerns the use of static codes in the RF remote control of the affected...

httpd: Weak Digest auth nonce generation in mod_auth_digest

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed...

USN-3850-2: NSS vulnerabilities

USN-3850-1 fixed several vulnerabilities in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack...