DEBIAN-CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

CVE-2018-12019

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids...

UBUNTU-CVE-2018-12019

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids...

CVE-2018-0495

CVE-2018-0495 affects Libgcrypt prior to 1.7.10 and 1.8.x prior to 1.8.3. The root cause is a memory-cache side-channel (ROHNP) in the ECDSA signing path (_gcry_ecc_ecdsa_sign in cipher/ecc-ecdsa.c), enabling an attacker with local or co-resident VM access to recover ECDSA private keys. Mitigatio...

CVE-2018-12019

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids...

CVE-2018-12019

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids...

CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Google Santa Code Signing Bypass (macOS)

The installed version of Google Santa is less than 0.9.25 and is therefore vulnerable to allowing execution of malicious binaries due to accepting forged Apple signatures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110519; scriptversion"1.6";...

Threat Outbreak Alert RuleID32946: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58153 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32946 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32945: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58152 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32945 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32937: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58151 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32937 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32909: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58150 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32909 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32899: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58149 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32899 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32947: Email Messages Distributing Malicious Software on June 12, 2018

Medium Alert ID: 58155 First Published: 2018 June 12 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32947 may contain the following files: Name | Siz...

Signature Validation Bug Let Malware Bypass Several Mac Security Products

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...

Threat Outbreak Alert RuleID32960: Email Messages Distributing Malicious Software on June 11, 2018

Medium Alert ID: 58147 First Published: 2018 June 11 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32960 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32923: Email Messages Distributing Malicious Software on June 8, 2018

Medium Alert ID: 58078 First Published: 2018 June 8 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32923 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32920: Email Messages Distributing Malicious Software on June 8, 2018

Medium Alert ID: 58080 First Published: 2018 June 8 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32920 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32932: Email Messages Distributing Malicious Software on June 8, 2018

Medium Alert ID: 58088 First Published: 2018 June 8 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32932 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32903: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58057 First Published: 2018 June 7 20:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32903 may contain the following files: Name | Size...