AlmaLinux 8 : gnome-software and fwupd (ALSA-2020:4436)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4436 advisory. - A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...

USN-5230-1 cpanminus vulnerability

It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access to sensitive data or possibly executing unauthorized code...

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

CVE-2021-45098

CVE-2021-45098 affects Suricata (pre-6.0.4). Core issue: an attacker can bypass HTTP-based signature checks by spoofing an RST TCP packet with random md5header options, injecting an RST ACK after the 3‑way handshake, leading the server to deliver HTTP responses for forbidden URLs without triggeri...

DEBIAN-CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

UBUNTU-CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

UBUNTU-CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

cpanminus 数据伪造问题漏洞

cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN without performing any other actions. cpanminus version 2.28 has a security vulnerability that stems from packages allowing signature verification to be bypassed. No details of the vulnerability are currently...

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

Zoom Client < 5.5.4 Signature Bypass Vulnerability (ZSB-21016) - Windows

The Zoom Client is prone to a signature bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2021-34420 Zoom Windows installation executable signature bypass

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer...

SUSE SLED15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2021:3650-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3650-1 advisory. - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717: Fixed privile...

Samba输入验证错误漏洞

Samba is the standard Windows interoperability suite for Linux and Unix. samba is vulnerable to an input validation error, which stems from a flaw found in the way samba implements DCE/RPC. If a client of the Samba server sends a very large DCE/RPC request and chooses to segment it, an attacker...

UBUNTU-CVE-2021-23192

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...

coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

Huawei Imanager NetEco 数据伪造问题漏洞

Huawei Imanager NetEco is a professional energy infrastructure management platform from Huawei of China. It is used to provide accurate operations and maintenance management. Huawei iManager NetEco has a security vulnerability that could be exploited by attackers to forge signatures, bypass...

PT-2022-2323

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u331, 8u321, 11.0.14, 17.0.2, 18 Oracle GraalVM Enterprise Edition versions 20.3.5, 21.3.1, 22.0.0.2 Description The issue is related to the implementation of the ECDSA digital signature algorithm in Oracle Java SE and...