Lucene search
+L

161 matches found

osv_debian
osv_debian
•added 2026/09/25 11:17 a.m.•20 views

DEBIAN-CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.3AI score0.0021EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/25 11:17 a.m.•18 views

AZL-104300 CVE-2026-97592 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.1AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•14 views

CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

0.0021EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2026/09/25 11:17 a.m.•18 views

UBUNTU-CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.3AI score0.0021EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/25 10:22 a.m.•14 views

EUVD-2026-86900

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.1AI score0.0021EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/25 10:22 a.m.•47 views

CVE-2026-97592 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

0.0021EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/09/25 10:22 a.m.•18 views

CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.3AI score0.0021EPSS
SaveExploits0
CVE
CVE
•added 2026/09/25 10:22 a.m.•29 views

CVE-2026-97592

The Linux kernel contains a vulnerability in the s390/crypto component related to the AES CTR and GCM algorithms. Specifically, the ctr_aes_crypt() function failed to scrub a buffer used for processing remaining bytes smaller than AES_BLOCK_SIZE, potentially leading to the exposure of sensitive d...

6.1AI score0.0021EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/09/25 10:22 a.m.•26 views

CVE-2026-97592 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

5.9AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•12 views

CVE-2026-97592: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.1AI score0.0021EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•15 views

CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.1AI score0.0021EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-97592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes...

6.1AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•4 views

PT-2026-98532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto implementation where temporary buffers used with AES CTR and GCM algorithms are not properly scrubbed. In the ctr aes crypt function, a buffer used for...

9.8CVSS6AI score0.00505EPSS
SaveExploits0References411
Snyk
Snyk
•added 2026/08/17 6:15 p.m.•16 views

Improper Verification of Cryptographic Signature

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.7AI score0.00405EPSS
SaveExploits0References2
osv_pysec
osv_pysec
•added 2026/08/17 11:16 a.m.•15 views

PYSEC-2026-3773

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.3CVSS5.8AI score0.00405EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 11:16 a.m.•19 views

CVE-2026-74901

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.8CVSS0.00405EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/17 11:16 a.m.•21 views

PYSEC-2026-3773

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.8CVSS5.7AI score0.00405EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/08/17 11:04 a.m.•56 views

CVE-2026-74901

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.8CVSS5.7AI score0.00405EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/17 11:04 a.m.•78 views

CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.8CVSS0.00405EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/17 11:04 a.m.•20 views

EUVD-2026-60118

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

9.8CVSS5.7AI score0.00405EPSS
SaveExploits0References2
Rows per page
Query Builder