details-for-CVE-2022-46505

CVE-2022-46505 の詳細 MatrixSSL セッション再開バグ 1. バグの説明 MatrixSSL 4.5.1-open およびそれ以前のバージョンには、SessionID フィールドの安全なチェックが行われず、その結果 すべてゼロの MasterSecret が誤って使用され、機密データが復号化される可能性がある問題があります。 2. 影響を受けるバージョン MatrixSSL 4.5.1-open およびそれ以前 3. 脆弱性タイプ TLS セッション再開の復号化 4. バグの詳細 matrixssl...

safe-check-CVE-2025-23419

Safe Check CVE-2025-23419 - NGINX mTLS Session Resumption CVE-2025-23419 の安全な検証スクリプトを含むリポジトリです。この脆弱性は NGINX 、mTLS 、TLS session resumption に関連しています。 スクリプトは、能動的な悪用を行わず、クライアント証明書による認証を回避しようとせず、ヒューリスティックなチェックを実行して脆弱性への露出の可能性を特定します。 その目的は、許可された環境における技術的なトリアージ、防御的検証、露出分析を支援することです。 対象の CVE...

CVE-2025-23048-POC

CVE-2025-23048：Apache modssl TLS 1.3 会话恢复客户端证书绕过 Apache HTTP Server 2.4.35 – 2.4.62 版本在跨不同SSLCACertificateFile 指令的虚拟主机使用 TLS 1.3 会话恢复时，存在客户端证书身份验证绕过漏洞。 攻击者持有某个虚拟主机的有效客户端证书，可以在需要由不同 CA 签发证书的另一虚拟主机上恢复 TLS 1.3 会话，从而未经授权访问受保护资源。 测试环境 Apache HTTP Server：2.4.57 Win64 操作系统：Windows 10（64 位） 服务器设置 1. 安装...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.44 security and extras update

Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 security and extras update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.35 security and extras update

Red Hat OpenShift Container Platform release 4.20.35 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Astra Linux - Vulnerability in Golang-1.19

Large handshake records can cause panics in the crypto/TLS context. Both clients and servers may send large TLS handshake records, which can cause both servers and clients to panic when attempting to construct responses. This issue affects all TLS 1.3 clients, TLS 1.2 clients that explicitly enab...

CVE-2026-72463

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-dev to tunnel dev without taking device reference, such as vtircvcb. T...

UBUNTU-CVE-2026-72463

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-dev to tunnel dev without taking device reference, such as vtircvcb. T...

CVE-2026-72463 xfrm: Fix dev use-after-free in xfrm async resumption

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-dev to tunnel dev without taking device reference, such as vtircvcb. T...

CVE-2026-72463 xfrm: Fix dev use-after-free in xfrm async resumption

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-dev to tunnel dev without taking device reference, such as vtircvcb. T...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Security Bulletin:Vulnerability in Crypto affects IBM Netezza Appliance

Summary The Crypto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2025-68121 Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...