158 matches found
PT-2025-5893
Name of the Vulnerable Software and Affected Versions libtasn1 affected versions not specified Description A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can...
CVE-2023-39467
Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability...
CVE-2023-32170
Unified Automation UaGateway OPC UA Server is affected by CVE-2023-32170 due to improper input validation in processing client certificates. The vulnerability can allow remote denial-of-service, requiring user interaction (the target must accept a client certificate) to exploit. Root cause: lack ...
PT-2024-13985 · Accredible · Accredible Credential.Net
Name of the Vulnerable Software and Affected Versions: Accredible Credential.net affected versions not specified Description: The API in Accredible Credential.net allows an Insecure Direct Object Reference attack, which discloses partial information about certificates and their respective holders...
CLSA-2024-1707379486 Update of alt-php
Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: Certificate "Atos TrustedRoot Root CA ECC G2 2020" Certificate "Atos TrustedRoot Root CA ECC TLS 202...
GHSA-WJXJ-5M7G-MG7Q Bouncy Castle Denial of Service (DoS)
Bouncy Castle for Java before 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafte...
CLSA-2023-1691083258 Update of alt-php
Update ca-certificates database to 20230629: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle to version 2.62. - The following certificate authorities were added +: + "BJCA Global Root CA1" + "BJCA Global Root CA2"...
Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2023-2481)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6156-1 sssd vulnerability
It was discovered that SSSD incorrrectly sanitized certificate data used in LDAP filters. When using this issue in combination with FreeIPA, a remote attacker could possibly use this issue to escalate privileges...
Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2023-2172)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : sssd (EulerOS-SA-2023-1610)
According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - sssd: libssscertmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Note that Tenable Network Security has extracted the...
SUSE CVE-2016-1950
Heap-based buffer overflow in Mozilla Network Security Services NSS before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate...
SUSE CVE-2017-15088
plugins/preauth/pkinit/pkinitcryptoopenssl.c in MIT Kerberos 5 aka krb5 through 1.15.2 mishandles Distinguished Name DN fields, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash in situations involving untrusted X.509 data,...
SUSE CVE-2020-12823
OpenConnect 8.09 has a buffer overflow, causing a denial of service application crash or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c...
LDAP Injection
sssd is vulnerable to LDAP Injection. The vulnerability exists because the libssscertmap fails to sanitize certificate data used in LDAP filters...
DEBIAN-CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
Design/Logic Flaw
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
