CLSA-2023-1676025915 openssl: Fix of 2 CVEs

CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...

CLSA-2023-1676025596 openssl: Fix of 2 CVEs

CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...

AZL-37614 CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-2

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

AZL-37883 CVE-2023-0286 affecting package hvloader for versions less than 1.0.1-4

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

USN-5845-2 openssl vulnerabilities

USN-5845-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this...

SUSE-SU-2023:0311-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERALNAMEcmp for x400Address bsc1207533. - CVE-2023-0215: Fixed use-after-free following BIOnewNDEF bsc1207536. - CVE-2022-4450: Fixed double free after calling PEMreadbioex...

Dell PowerProtect Data Manager and PowerProtect X400 Licensing Issues Vulnerability

Dell PowerProtect Data Manager PPDM and PowerProtect X400 are both products from Dell, U.S.A. Dell PowerProtect Data Manager is a data protection solution. It supports data backup, virtual machine backup and database protection.PowerProtect X400 is a data management appliance. An authorization...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356

Dell PowerProtect Data Manager (PPDM) and PowerProtect X400 are affected by CVE-2020-5356 for versions prior to PPDM 19.4 and X400 3.2, where an improper authorization flaw allows a remote authenticated user to download any file from affected virtual machines. The issue is confirmed by multiple s...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356: Improper Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2019-11686

CVE-2019-11686 concerns Western Digital/SanDisk self-encrypting drives (X300, X300s, X400, X600). The wear-leveling algorithm can leave cryptographic parameters (e.g., DEKs) on media after supposed erasure, potentially enabling data disclosure if an attacker accesses the drive. Connected sources ...

CVE-2019-10706: Insufficiently Protected Credentials

Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on a symmetric HMAC digest. The key used to validate this digest is present in a protected area of the device, and if extracted could be used to install arbitrary firmware to othe...

CVE-2019-11686: Insufficiently Protected Credentials

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters such as data encryption keys to remain on the drive media after their intended erasure...

CVE-2003-0565

Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an X.400 message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite...