3564 matches found
UBUNTU-CVE-2021-38385
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...
CVE-2021-38385
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...
CVE-2021-38385
Tor vulnerable in versions before 0.3.5.16, 0.4.5.10, and 0.4.6.7 due to mishandling the relationship between batch-signature and single-signature verification, causing remote assertion failures (TROVE-2021-007). Connected advisories confirm the issue across multiple distributions and recommend u...
CVE-2021-38385
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007...
openSUSE 15 Security Update : tor (openSUSE-SU-2021:1192-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1192-1 advisory. - Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification,...
tough-ssm (0.1.0), tuftool (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-15093 via tough (>=0.1.0, <=0.6.0)
tough CARGO version =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2020-15093 Source advisory: OSV:GHSA-5Q2R-92F9-4M49...
Failure to properly verify ed25519 signatures in libp2p-core
Affected versions of this crate did not properly verify ed25519 signatures. Any signature with a correct length was considered valid. This allows an attacker to impersonate any node identity...
[SECURITY] [DSA 4961-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 23, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4961-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 23, 2021 https://www.debian.org/security/faq -...
openSUSE 15 Security Update : tor (openSUSE-SU-2021:1169-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1169-1 advisory. - Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification,...
OpenSSL: OCSP Invalid Key DoS Issue (20130205) - Windows
OpenSSL is prone to a denial of service attack. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
TOR Virtual Network Tunneling Tool 安全漏洞
TOR Virtual Network Tunneling Tool is a packet storm open source application a virtual tunneling network that allows individuals and groups to improve their privacy and security over the Internet. TOR Virtual Network Tunneling Tool A security vulnerability exists in the TOR Virtual Network...
OPENSUSE-SU-2021:2687-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llseckeyalloc in net/mac802154/llsec.c bsc1188876. - CVE-2021-21781: Fixed a information disclosure...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2687-1 Rating: important References: 1065729 1085224 1094840 1113295 1152472 1152489 1153274 1154353 1155518 1156395 1170511 1176447 1176940 1179243 1180092 1180814 1183871 1184114 1184350 1184631...
EulerOS 2.0 SP8 : nettle (EulerOS-SA-2021-2307)
According to the version of the nettle packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the...
Breaking the Android Bootloader on the Qualcomm Snapdragon 660
This post is a companion to the DEF CON 29 video available here. A few months ago I purchased an Android phone to do some research around a specific series of NFC chips, which required me to gain root access to the device in order to fully access its hardware capabilities. Gaining root access on...
Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2307)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the EVlink City, Parking, and Smart Wallbox software lies in errors in the verification of cryptographic signatures. This allows a malicious actor to create a malicious package and bypass the signature verification mechanism.
The vulnerability of the EVlink City, Parking, and Smart Wallbox software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker to create a malicious package and bypass the signature verification mechanism...
CVE-2021-38195
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow...
CVE-2021-38195
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow...