92 matches found
wolfssl
MQX向けビルド方法 概要 このMakefileはwolfSSLライブラリーとサンプルプログラムをMQX向けにビルドするためのものです。 以下のターゲットを含んでいます。 wolfssllib: wolfSSL静的ライブラリー test: 暗号アルゴリズムのテスト benchmark: 暗号アルゴリズムのベンチマーク client: TLS クライアントサンプルプログラム server: TLS サーバサンプルプログラム 準備 事前にGCCをインストールしておいてください。 GNU Arm Embedded Toolchain, https://developer.arm.com...
rustls
Rustls 是一个用 Rust 编写的现代 TLS 库。 状态 Rustls 已被许多组织和项目在生产环境中使用。我们力求保持合理的 API 表面稳定性，但随着我们为支持新功能或性能改进而做出变更，API 仍可能持续演进。 我们在路线图中列出了未来计划。我们还提供基准测试，以防止性能回退，并让你在目标硬件上评估 rustls。 如果你愿意提供帮助，请参阅 CONTRIBUTING.md。 维护者将 "rustls" 读作 rustles（而非 rust-TLS），但我们对此并无强烈意见。 更新日志 每个版本中详细的变更列表可在...
CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser
9. CVE-2026-6789 – 組み込みTLS証明書パーサーにおけるスタックバッファオーバーフロー 概要 ある一般的な軽量TLSライブラリ（シミュレーション）には、細工された長さフィールドを持つX.509証明書のSubject Alternative Name拡張を解析する際に、スタックバッファオーバーフローが発生します。 深刻度: 重大 IoT/産業機器におけるRCE 脆弱なCパーサーとエクスプロイト // tlsx509vuln.c include include include include // Vulnerable certificate parser struct...
Astra Linux – Vulnerability in mbedtls
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability exists in the decoding of Base64 PEM files. This vulnerability allows system-level administrator attackers to obtain information about secret RSA keys through a controlled-channel and side-channel attack on software running in...
rustls v/0.23.44
Rustls is a modern TLS library written in Rust. Status Rustls is used in production at many organizations and projects. We aim to maintain reasonable API surface stability but the API may evolve as we make changes to accommodate new features or performance improvements. We have a roadmap for our...
OPENSUSE-SU-2026:11526-1 libs2n1-1.7.7-1.1 on GA media
These are all security issues fixed in the libs2n1-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed...
Photon OS 5.0: Gnutls PHSA-2025-5.0-91-0480
An update of the gnutls package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0480. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
OESA-2026-3118 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
RHEL 7 : gnutls (RHSA-2026:43575)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43575 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such a...
CVE-2026-16318 QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls
The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2nalloc instead of s2nrealloc to store the peer's transport parameters. When a TLS 1.3 connection goes through a HelloRetryRequest, the handler is called twice on the same connection. On the second call, s2nalloc zeroes...
The vulnerability of the parse_handshake_header() function in the GnuTLS cryptographic library allows a attacker to induce a service failure.
The vulnerability of the parsehandshakeheader function in the GnuTLS cryptographic library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
RLSA-2026:20612 Important: gnutls security update
The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Fix qsort comparator in DTLS reassembly CVE-2026-42009 gnutls: Fix crashing on an underflow with a DTLS datagram...
crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...
curl: Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match
Hi all, Sorry to ruin anybody's day, but we've discovered another issue when it comes to dots. We've found a TLS certificate verification bypass that lets a trailing-dot IPv4 URL -- https://127.0.0.1./ -- pass peer authentication against a wildcard DNS SAN certificate such as DNS:.0.0.1. The IP...
The vulnerability of the Cisco IOS XE operating system’s TLS library allows attackers to trigger memory exhaustion or service failure.
The vulnerability of the Cisco IOS XE operating system’s TLS library is related to the absence of references to an active, allocated resource. Exploiting this vulnerability can allow a malicious actor to induce memory exhaustion or service failure from a remote perspective...
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.
...
a11ywatch_cli (>=0.0.26, <=0.7.16), aap (>=0.4.0, <=0.4.1) +3743 more potentially affected by unknown CVE via rustls-webpki (>=0.100.3, <=0.102.8)
rustls-webpki CARGO version =0.100.3, =0.0.26, =0.4.0, =0.1.0, =0.21.0-alpha.1, =0.1.11, =0.12.1, =0.2.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0104...
[SECURITY] Fedora 43 Update: mbedtls-3.6.6-1.fc43
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
