312 matches found
GO-2023-2402 Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto
A protocol weakness allows a MITM attacker to compromise the integrity of the secure channel before it is established, allowing the attacker to prevent transmission of a number of messages immediately after the secure channel is established without either side being aware. The impact of this atta...
Windows Hello fingerprint authentication can be bypassed on popular laptops
Researchers have found several weaknesses in Windows Hello fingerprint authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. Microsoft’s Offensive Research and Security Engineering MORSE asked the researchers to evaluate the security of the top three...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
samba security update
An update is available for samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
RHEL 9 : samba (RHSA-2023:2137)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2137 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...
Important: samba security update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and...
Secure Channel Windows DoS
The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Windows Secure Channel DoS
The vulnerability of the Windows Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...
Secure Channel Windows DoS
The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2023-28233
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-28234
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-28233
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-28234
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-24931
Windows Secure Channel Denial of Service Vulnerability...
Denial of service
Windows Secure Channel Denial of Service Vulnerability...
Denial of service
Windows Secure Channel Denial of Service Vulnerability...
Denial of service
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-28234
CVE-2023-28234 is a Windows Secure Channel (Schannel) Denial of Service vulnerability. Affected component is the Windows Transport Security Layer (TLS). CVSS v3.1: 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH impact on Availability). The provided documents do ...