CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, cadvisor, dynamic-localpv-provisioner, zot, paranoia, wait-for-port, capslock, terraform-docs, flux-source-controller, mockery, prometheus-statsd-exporter-fips, metrics-server, opa, aws-flb-firehose-fips, certificate-transparency,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: fulcio, melange, skaffold, kube-rbac-proxy, grpc-health-probe, terragrunt, oauth2-proxy, weaviate, rekor, argo-workflows, goreleaser, kots, tkn, kargo, rabbitmq-messaging-topology-operator, gomplate, dex, dgraph, ko, nerdctl, minio, falcoctl, caddy, apko, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, kubescape, vault-csi-provider, metrics-server-fips, k3d, aws-efs-csi-driver-fips, kube-oidc-proxy, terraform-provider-sendgrid-fips, bank-vaults-fips, terraform-provider-sendgrid, volume-modifier-for-k8s-fips, kubernetes-csi-livenessprobe-fip...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: bom, prometheus-adapter-fips, dynamic-localpv-provisioner, stakater-reloader, kube-oidc-proxy, kaf, pulumi-kubernetes-operator, kubeflow-fips, terraform-provider-azurerm, hey, flux-source-controller, pulumi-language-java, wireguard-go, dgraph, gke-gcloud-auth-plugin,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: bom, prometheus-adapter-fips, dynamic-localpv-provisioner, stakater-reloader, kube-oidc-proxy, kaf, pulumi-kubernetes-operator, kubeflow-fips, terraform-provider-azurerm, hey, flux-source-controller, pulumi-language-java, wireguard-go, dgraph, gke-gcloud-auth-plugin,...

OESA-2022-1938 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function...

EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2021-1339)

According to the version of the openssl110f packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName...

EulerOS 2.0 SP3 : openssl (EulerOS-SA-2021-1104)

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL...

Oracle Linux 8 : openssl (ELSA-2020-5476)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5476 advisory. - Fix CVE-2020-1971 ediparty null pointer dereference Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Amazon Linux AMI : openssl (ALAS-2020-1456)

The version of openssl installed on the remote host is prior to 1.0.2k-16.152. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1456 advisory. A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp...

ALPINE-CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...

CVE-2020-1971 EDIPARTYNAME NULL pointer dereference

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...

CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...

UBUNTU-CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...