Lucene search
+L

8 matches found

Prion
Prion
•added 2019/12/03 8:15 p.m.•28 views

Buffer overflow

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.8CVSS7.4AI score0.0191EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2019/12/03 8:15 p.m.•27 views

CVE-2019-10013

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.8CVSS7.1AI score0.0191EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/03 8:15 p.m.•16 views

UBUNTU-CVE-2019-10013

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.5CVSS5.8AI score0.0191EPSS
SaveExploits0References2
Mend
Mend
•added 2019/12/03 8:00 p.m.•2 views

CVE-2019-10013

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

8.7CVSS0.0191EPSS
SaveExploits0References5
CVE
CVE
•added 2019/12/03 8:00 p.m.•88 views

CVE-2019-10013

The CVE-2019-10013 entry concerns the axTLS library (Cameron Hamilton-Rich) up to version 2.1.5. The asn1_signature function in asn1.c contains a Buffer Overflow vulnerability triggered by a crafted TLS certificate in the handshake, because get_asn1_length() is not checked for a sensible minimum/...

7.8CVSS7.4AI score0.0191EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/03 12:00 a.m.•4 views

CVE-2019-10013: Buffer Copy without Checking Size of Input

The asn1signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service memory and CPU consumption via a crafted certificate in the TLS certificate handshake message, because the result of getasn1length is n...

7.8CVSS7.2AI score0.0191EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/02 12:00 a.m.•18 views

axTLS Denial of Service Vulnerability (CNVD-2019-45138)

axTLS is a highly configurable client/server TLS Secure Transport Layer Protocol library. A security vulnerability exists in the 'asn1signature' function of the asn1.c file in axTLS 2.1.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

7.8CVSS6.7AI score0.0191EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/02 12:00 a.m.•17 views

axTLS Denial of Service Vulnerability

axTLS is a highly configurable client/server TLS Secure Transport Layer Protocol library. A security vulnerability exists in the 'asn1signature' function of the asn1.c file in axTLS 2.1.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS6.7AI score0.01479EPSS
SaveExploits0References1
Rows per page
Query Builder