Oracle MySQL Server <= 5.5.45 / 5.6 <= 5.6.26 Security Update (cpujan2016) - Windows

Oracle MySQL Server is prone to a vulnerability in a third party library. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wolfssl:fuzzer-wolfssh-client-randomize: Use-of-uninitialized-value in memory_test

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4731601975771136 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in wc_AesFeedbackEncrypt

Detailed Report: https://oss-fuzz.com/testcase?key=6272306739544064 Project: wolfssl Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl-api Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address: 0x60200000019f Crash State: wcAesFeedbackEncrypt...

wolfssl:cryptofuzz-openssl-api: Use-of-uninitialized-value in wolfSSL_HmacCopy

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5631799994744832 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in AES_GCM_encrypt_C

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5682542969749504 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

wolfssl:cryptofuzz-openssl-api: Use-of-uninitialized-value in wc_HmacFree

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5759363123904512 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfSSL Out-of-Bounds Write Vulnerability

wolfSSL is a small, portable, embedded SSL/TLS library intended for use by embedded systems developers. An out-of-bounds write vulnerability exists in RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL versions prior to 4.6.0. No detailed vulnerability details are provided at this time...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

DEBIAN-CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

Out-of-bounds

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. Remediation Upgrade wolfssl to version 4.6.0 or higher. References -...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

CVE-2020-36177 describes an out-of-bounds write in RsaPad_PSS within wolfcrypt/src/rsa.c of wolfSSL before 4.6.0, triggered by certain relationships between key size and digest size. The CVSSv3.1 base score is 9.8 (CRITICAL). Documents in OpenWrt and CNVD/NVD/osv references confirm the issue and ...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

PT-2021-11957

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 4.6.0 Description: The issue is related to the RsaPad PSS function in the wolfcrypt/src/rsa.c file, which has an out-of-bounds write for certain relationships between key size and digest size. Recommendations: For...

Wolfssl wolfSSL 缓冲区错误漏洞

wolfSSL is a small, portable, embedded SSL/TLS library intended for use by embedded systems developers. An out-of-bounds write vulnerability exists in RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL versions prior to 4.6.0. No detailed vulnerability details are provided at this time...

CVE-2020-36177: Out-of-bounds Write

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...