NewStart CGSL MAIN 6.02 : nettle Vulnerability (NS-SA-2021-0132)

The remote NewStart CGSL host, running version MAIN 6.02, has nettle packages installed that are affected by a vulnerability: - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve...

NewStart CGSL CORE 5.04 / MAIN 5.04 : nettle Vulnerability (NS-SA-2021-0109)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has nettle packages installed that are affected by a vulnerability: - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Cur...

coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to errors in verifying cryptographic signatures, allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

QuickAccManager Smart Contract signature verification can be exploited

Handle cmichel Vulnerability details Several different signature modes can be used and Identity.execute forwards the signature parameter to the SignatureValidator library. The returned signer is then used for the privileges check: address signer = SignatureValidator.recoverAddrImplhash, signature...

The vulnerability of the Apache OpenOffice office software, related to errors in checking the cryptographic signature, allows a hacker to modify the content of ODF documents.

The vulnerability of the Apache office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to modify the content of ODF documents remotely...

The vulnerability of the LibreOffice office software package, related to errors in verifying the cryptographic signature, allows a hacker to perform a spoofing attack.

The vulnerability of the LibreOffice office software package is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

GHSA-56WV-2WR9-3H9R Improper Verification of Cryptographic Signature in fastecdsa

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

Improper Verification of Cryptographic Signature in fastecdsa

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

Impact coreos-installer fails to correctly verify GPG signatures when decompressing gzip-compressed artifacts. This allows bypass of signature verification in cases where coreos-installer decompresses a downloaded OS image, allowing an attacker who can modify the OS image to compromise a...

CVE-2021-20319

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

CVE-2021-34788

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-34788 Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

The vulnerability of the libdnf package manager library involves incorrect verification of the cryptographic signature of data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Huawei EulerOS: Security Advisory for libdnf (EulerOS-SA-2021-2555)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2555)

According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...

EulerOS 2.0 SP9 : nettle (EulerOS-SA-2021-2536)

According to the versions of the nettle package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the...

EulerOS 2.0 SP9 : nettle (EulerOS-SA-2021-2560)

According to the versions of the nettle package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the...

EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2531)

According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...

EulerOS 2.0 SP8 : libdnf (EulerOS-SA-2021-2468)

According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...