Lucene search
+L

6 matches found

UbuntuCve
UbuntuCve
added 2019/12/03 8:15 p.m.20 views

CVE-2019-10013

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.8CVSS7.1AI score0.0191EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/03 8:15 p.m.8 views

UBUNTU-CVE-2019-10013

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.5CVSS5.8AI score0.0191EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/03 8:15 p.m.18 views

Buffer overflow

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.8CVSS7.4AI score0.0191EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2019/12/03 8:00 p.m.74 views

CVE-2019-10013

The CVE-2019-10013 entry concerns the axTLS library (Cameron Hamilton-Rich) up to version 2.1.5. The asn1_signature function in asn1.c contains a Buffer Overflow vulnerability triggered by a crafted TLS certificate in the handshake, because get_asn1_length() is not checked for a sensible minimum/...

7.8CVSS7.4AI score0.0191EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2019/12/02 12:00 a.m.12 views

axTLS Denial of Service Vulnerability (CNVD-2019-45138)

axTLS is a highly configurable client/server TLS Secure Transport Layer Protocol library. A security vulnerability exists in the 'asn1signature' function of the asn1.c file in axTLS 2.1.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

7.8CVSS6.7AI score0.0191EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/02 12:00 a.m.13 views

axTLS Denial of Service Vulnerability

axTLS is a highly configurable client/server TLS Secure Transport Layer Protocol library. A security vulnerability exists in the 'asn1signature' function of the asn1.c file in axTLS 2.1.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS6.7AI score0.01479EPSS
SaveExploits0References1
Rows per page
Query Builder