3563 matches found
PT-2020-5371 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.8.13 Description: The issue is related to incorrect cryptographic signature verification in the Linux kernel. This could allow an attacker to impact the confidentiality, integrity, and availability of protecte...
CVE-2019-10562
u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...
Authentication flaw
u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...
CVE-2019-10562
CVE-2019-10562 affects Qualcomm Snapdragon families (including IPQ6018, MSM CPUs) with an improper authentication and signature verification of debug policies in the secure boot loader. The root cause is insecure policy loading into secure memory, leading to memory corruption and potential local ...
CVE-2019-10562
u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...
EulerOS Virtualization for ARM 64 3.0.2.0 : python-ecdsa (EulerOS-SA-2020-1977)
According to the version of the python-ecdsa package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without th...
PT-2020-6578 · Red Hat +2 · Ansible Engine +2
Name of the Vulnerable Software and Affected Versions: Ansible Engine versions 2.8.x through 2.8.14 Ansible Engine versions 2.9.x through 2.9.12 Description: A flaw was found in the Ansible Engine when installing packages using the dnf module. GPG signatures are ignored during installation even...
EulerOS 2.0 SP5 : python-ecdsa (EulerOS-SA-2020-1929)
According to the version of the python-ecdsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without...
ansible: dnf module install packages with no GPG signature
A flaw was found in the Ansible Engine when installing packages using the dnf module. GPG signatures are ignored during installation even when disablegpgcheck is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code...
EulerOS 2.0 SP8 : icedtea-web (EulerOS-SA-2020-1856)
According to the versions of the icedtea-web package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising th...
GHSA-2828-9VH6-9M6J Client Denial of Service on TUF
Impact An attacker who can gain file access to the repository and modify metadata files may cause a denial of service to clients by creating many invalid signatures on a metadata file. Having a large number of signatures to verify will delay the moment when the client will determine the signature...
Incorrect threshold signature computation in TUF
Impact Metadadata signature verification, as used in tuf.client.updater, counted each of multiple signatures with identical authorized keyids separately towards the threshold. Therefore, an attacker with access to a valid signing key could create multiple valid signatures in order to meet the...
Pritunl-client Data Forgery Issue Vulnerability
Pritunl-client is an open source OpenVPN client application from the American company Pritunl. A security vulnerability exists in pritunl-client versions prior to 1.0.1116.6, which stems from a lack of signature verification in the program. An attacker can exploit this vulnerability to obtain...
CVE-2020-15827
In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file...
CVE-2020-15827
JetBrains Toolbox 1.17 before 1.17.6856 had a signature verification issue: the set of verifications omitted the jetbrains-toolbox.exe. This concerns integrity checks. Remediation: upgrade to 1.17.6856 or newer per the JetBrains Security Bulletin Q2 2020.
DP3T-Backend-SDK Data Forgery Issue Vulnerability
DP3T-Backend-SDK is a backend implementation of DP3T Decentralized Privacy Preserving Neighborhood Tracking. A security vulnerability exists in DP3T-Backend-SDK versions prior to 1.1.1. An attacker can exploit the vulnerability to bypass signature checking...
grub2 data forgery issue vulnerability
grub2 is a Linux system bootloader from the GNU Project. A data forgery issue vulnerability exists in GRUB2 2.04 and earlier versions. The vulnerability stems from the program not verifying kernel signatures when booting directly without shim. An attacker could exploit this vulnerability to bypas...
Critical Magento Flaws Allow Code Execution
Critical flaws in Adobe’s Magento e-commerce platform – which is commonly targeted by attackers like the Magecart cybergang – could enable arbitrary code execution on affected systems. Magento is a popular, Adobe-owned open-source e-commerce platform that powers many online shops. Adobe on Tuesda...