SUSE: Security Advisory (SUSE-SU-2022:0768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:0760-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:14905-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:0756-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

CVE-2021-44421 affects Occlum prior to 0.26.0 for Intel SGX. The pointer-validation logic in util/mem_util.rs acts as a confused deputy, allowing a local attacker to access unauthorized information via side-channel analysis. A fix is available in Occlum 0.26.0 and later; upgrade to mitigate.

openSUSE 15 Security Update : wpa_supplicant (openSUSE-SU-2022:0716-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0716-1 advisory. - The implementations of SAE in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side channel attacks as a result of cac...

openSUSE: Security Advisory for wpa_supplicant (openSUSE-SU-2022:0716-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2022:0716-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0716-1 advisory. - The implementations of SAE in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side chann...

SUSE-SU-2022:0716-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2022-23303: Fixed side-channel attacks in SAE bsc1194732. - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd bsc1194733...

OPENSUSE-SU-2022:0716-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2022-23303: Fixed side-channel attacks in SAE bsc1194732. - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd bsc1194733...

Security update for wpa_supplicant (important)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2022:0716-1 Rating: important References: 1194732 1194733 Cross-References: CVE-2022-23303 CVE-2022-23304 CVSS scores: CVE-2022-23303 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-23303 SUSE...

Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption

A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the "first side-channel attack" on homomorphic encryption that could be exploited to leak data as the encryption process is underway. "Basically, by monitoring power...

SUSE-SU-2022:0504-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2022-23303: Fixed side-channel attacks in SAE bsc1194732. - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd bsc1194733...

EulerOS 2.0 SP3 : libgcrypt (EulerOS-SA-2022-1173)

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel atta...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-0732, CVE-2018-0737)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project on April 16, 2018 and June 12, 2018. OpenSSL, used by IBM Spectrum Control formerly Tivoli Storage Productivity Center , has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is...

Softing Secure Integration Server 代码问题漏洞

Softing Secure Integration Server is a secure integration server from Softing Germany. It provides a powerful OPC UA data integration layer and supports interface abstraction, aggregation, data preprocessing and security supervision. A code issue vulnerability exists in Softing Secure Integration...

SUSE: Security Advisory (SUSE-SU-2022:0504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2022:0504-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0504-1 advisory. - CVE-2022-23303: Fixed side-channel attacks in SAE bsc1194732. - CVE-2022-23304: Fixed side-channel attacks in EAP-pwd bsc1194733...

Privilege Escalation

Sourcegraph is vulnerable to side-channel attack. The attack is possible because the library does not properly exclude the private source code in the Code Monitoring , allowing an authenticated attacker to create many Code Monitors to receive confirmation that a specific string exists...