CVE-2022-24043

Siemens Desigo DXR2, PXC3, PXC4 and PXC5 are affected by CVE-2022-24043 due to a login-side-channel: the system does not normalize response times between failed logins with wrong usernames and correct usernames, enabling username enumeration. Affected versions are: Desigo DXR2 < v01.21.142.5-2...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-006 (ALASKERNEL-5.4-2022-006)

The version of kernel installed on the remote host is prior to 5.4.141-67.229. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-006 advisory. A flaw was found in the Linux kernel. This flaw allows attackers to cause a denial of service soft lockup b...

Google Android Information Disclosure Vulnerability (CNVD-2022-44552)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which stems from a side-channel information disclosure that could compromise installed packages. An attacker could exploit the vulnerability to cause a...

Slackware: Security Advisory (SSA:2013-287-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2013-242-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2013-215-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0716-2 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2022-23303: Fixed side-channel attacks in SAE bsc1194732. - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd bsc1194733...

Medium: libgcrypt

Issue Overview: A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to decrypt parts of ciphertext encrypted using Elgamal, for example, when using OpenPGP. The highest threat from this vulnerability is to confidentiality...

Medium: libgcrypt

Issue Overview: A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to decrypt parts of ciphertext encrypted using Elgamal, for example, when using OpenPGP. The highest threat from this vulnerability is to confidentiality...

Google Android Information Disclosure Vulnerability (CNVD-2022-26767)

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability, which stems from the leakage of side-channel information in Framework and can be used by attackers to obtain sensitive information...

Amazon Linux AMI : libgcrypt (ALAS-2022-1578)

The version of libgcrypt installed on the remote host is prior to 1.5.3-12.20. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1578 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to...

Google Android Information Disclosure Vulnerability (CNVD-2022-26763)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a security vulnerability that stems from the disclosure of side-channel information in settings, which can be exploited by attackers to obtain sensitive information...

Amazon Linux 2 : libgcrypt (ALAS-2022-1769)

The version of libgcrypt installed on the remote host is prior to 1.5.3-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1769 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to decryp...

Google Android Information Disclosure Vulnerability (CNVD-2022-26768)

Google Android is a Linux-based open-source operating system from the U.S. Google Android has a security vulnerability that stems from the leakage of side channel information in DevicePolicyManager, which can be exploited by attackers to obtain sensitive information...

Oracle Linux 8 : libgcrypt (ELSA-2022-9263)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9263 advisory. - Fix for CVE-2021-33560 1971421 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Google Android Information Disclosure Vulnerability (CNVD-2022-44596)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from a side-channel information disclosure in AudioService. The vulnerability can be exploited by attackers to cause local...

Google Android Information Disclosure Vulnerability (CNVD-2022-44595 )

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from a side channel information disclosure in ContextImpl. An attacker could exploit this vulnerability to cause a local informati...

CVE-2021-39791

In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-39791

In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-39775

In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...