590 matches found
CVE-2024-42461
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...
CVE-2024-42461
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...
perl-Convert-ASN1 security update
An update is available for perl-Convert-ASN1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Convert::ASN1 encodes and decodes ASN.1 data structures using BER/D...
RLSA-2024:3049 Moderate: perl-Convert-ASN1 security update
Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules. Security Fixes: perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input CVE-2013-7488 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
libIEC61850 Security Vulnerabilities
libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libIEC61850 version v1.5, which originates from a heap overflow contained in the BerEncoderencodeLength function in /asn1/berencoder.c. The vulnerability is caused by...
Vulnerability of the treatLengthEndState() function in the asn1/ber module asn1/ber/src/main/java/org/apache/directory/api/asn1/ber/Asn1Decoder.java. The Apache Directory LDAP API allows a hacker to trigger a service denial.
The vulnerability of the treatLengthEndState function in the asn1/ber/src/main/java/org/apache/directory/api/asn1/ber/Asn1Decoder.java module. The Apache Directory LDAP API is vulnerable due to a lack of control over user-input data. Exploiting this vulnerability could allow an attacker to cause...
Moderate: Red Hat Security Advisory: perl-Convert-ASN1 security update
An update for perl-Convert-ASN1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...
Moderate: perl-Convert-ASN1 security update
Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules. Security Fixes: perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input CVE-2013-7488 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
GHSA-6JMW-6MXW-W4JC BER/CER/DER decoder panics on invalid input
NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding...
CVE-2023-39914 BER/CER/DER decoder panics on invalid input
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding...
RUSTSEC-2023-0062 BER/CER/DER decoder panics on invalid input
Due to insufficient checking of input data, decoding certain data sequences can lead to bcder panicking rather than returning an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding. bcder 0.7.3 fixes these issues by more...
OESA-2023-1334 openldap security update
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
AZL-27011 CVE-2023-2953 affecting package openldap for versions less than 2.4.57-9
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...
K01837042: Multiple Wireshark (tshark) vulnerabilities
Security Advisory Description CVE-2015-8711 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash v...
SUSE CVE-2004-0644
The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...
SUSE CVE-2005-2366
Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service abort or infinite loop via unknown attack vectors...
SUSE CVE-2005-3244
The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
SUSE CVE-2006-1933
Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...
SUSE CVE-2008-1673
The asn1 implementation in a the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ipnatsnmpbasic modules; and b the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of servi...