Lucene search
K

8 matches found

OSV
OSV
added 2026/02/20 11:5 p.m.2 views

CVE-2026-27134 Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi incorrectly configures the trusted...

8.1CVSS5.5AI score0.0002EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/20 11:5 p.m.2 views

CVE-2026-27134

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi incorrectly configures the trusted...

8.1CVSS5.5AI score0.0002EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 11:5 p.m.2 views

CVE-2026-27134 Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi incorrectly configures the trusted...

8.1CVSS5.4AI score0.0002EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/20 10:38 p.m.18 views

CVE-2026-27133 Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 to before 0.50.1, when a chain consisting of multiple CA Certificate Authority certificates is used in the trusted certificates configuration of a Kafka Connect opera...

5.9CVSS0.00012EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-2340

Malware in sbrugna...

8.3CVSS6.4AI score0.0008EPSS
Exploits0References5
OSV
OSV
added 2022/10/31 6:45 p.m.13 views

GHSA-PMW9-567P-68PC OctoRPKI crashes when max iterations is reached

Impact Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman -...

5.4CVSS7.1AI score0.00074EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/10/31 6:45 p.m.31 views

OctoRPKI crashes when max iterations is reached

Impact Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman -...

7.5CVSS6.9AI score0.00074EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2022/10/28 7:15 a.m.28 views

CVE-2022-3616

Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer...

7.5CVSS7.1AI score0.00074EPSS
Exploits0References2
Rows per page
Query Builder