312 matches found
CVE-2024-43550 Windows Secure Channel Spoofing Vulnerability
...
CVE-2024-43550
CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...
CVE-2024-43550 Windows Secure Channel Spoofing Vulnerability
...
Windows Secure Channel Spoofing Vulnerability
...
CVE-2024-43550: Improper Certificate Validation
Windows Secure Channel Spoofing Vulnerability...
PT-2024-6919 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows Secure Channel component, which is associated with errors in the certificate authentication procedure. This vulnerability can...
Microsoft Windows Secure Channel Trust Management Vulnerability
Microsoft Windows Secure Channel is a Microsoft Security Support Provider SSP that contains a set of security protocols that provide authentication and secure, private communications through encryption. A vulnerability exists in Microsoft Windows Secure Channel for trust management issues. An...
Secure Channel Windows DoS
The vulnerability of the Secure Channel component in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2024-38148
Windows Secure Channel Denial of Service Vulnerability...
CVE-2024-38148
Windows Secure Channel Denial of Service Vulnerability...
CVE-2024-38148
CVE-2024-38148 is documented in the provided connected documents as a Windows Schannel/ Transport Layer Security denial-of-service vulnerability (CVSS v3.1 base score 7.5, NETWORK attack vector, no user interaction). The associated impacts in the sources indicate a DoS condition affecting Windows...
CVE-2024-38148 Windows Secure Channel Denial of Service Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
CVE-2024-38148: Out-of-bounds Read
Windows Secure Channel Denial of Service Vulnerability...
PT-2024-5644
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue exists within the Windows Secure Channel Schannel component that can lead to a denial-of-service condition. Exploitation of this issue may allow a remote attacker to cause a...
Microsoft Windows Secure Channel security vulnerabilities
Microsoft Windows Secure Channel is a Security Support Provider SSP from Microsoft Corporation USA that contains a set of security protocols that provide authentication and secure, private communications through encryption. A security vulnerability exists in Microsoft Windows Secure Channel. An...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
CLSA-2024-1707420378 Fix CVE(s): CVE-2023-48795
SECURITY UPDATE: it's possible to remove the initial messages on the secure channel without causing a MAC failure - debian/patches/CVE-2023-48795.patch: implement "strict key exchange" in ssh and sshd - CVE-2023-48795...
Fedora: Security Advisory (FEDORA-2024-7e301327c2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS)
A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM adversary-in-the-middle attack between the SQL client and the SQL server. This may allow the attacker to stea...