Lucene search
K

36 matches found

RedHat Linux
RedHat Linux
added yesterday3 views

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

5.9AI score0.00042EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/05/20 1:3 p.m.5 views

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

6.1AI score0.00042EPSS
Exploits0References5
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfsmatchclient If the TLS security policy is of type RPCXPRTSECTLSX509, then the certserial and privkeyserial fields also need to match, as they define the client’s identity, as presented ...

5.8AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 6:22 p.m.7 views

CVE-2026-0238

Technical details for CVE-2026-0238 are not publicly available in the provided documents. Monitor for updates.

4.8CVSS5.9AI score0.00032EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/13 6:22 p.m.3 views

CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields

A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields...

4.8CVSS5.9AI score0.00032EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/13 6:22 p.m.25 views

CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields

A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields...

4.8CVSS0.00032EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2026/05/05 5:31 a.m.3 views

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

6.1AI score0.00042EPSS
Exploits0References5
OSV
OSV
added 2026/01/26 2:47 p.m.4 views

BIT-NODE-2025-59464

A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through...

7.5CVSS5.9AI score0.00098EPSS
Exploits0References2
OSV
OSV
added 2026/01/26 2:47 p.m.3 views

BIT-NODE-MIN-2025-59464

A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through...

7.5CVSS5.9AI score0.00098EPSS
Exploits0References2
OSV
OSV
added 2026/01/20 9:16 p.m.1 views

UBUNTU-CVE-2025-59464

A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through...

7.5CVSS5.8AI score0.00098EPSS
Exploits0References3
CVE
CVE
added 2026/01/20 8:41 p.m.9 views

CVE-2025-59464

CVE-2025-59464 describes a memory leak in Node.js OpenSSL integration during conversion of X.509 certificate fields to UTF-8, occurring when applications call socket.getPeerCertificate(true). Each certificate field leaks memory, enabling steady memory growth over TLS connections and potentially c...

7.5CVSS5.5AI score0.00098EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/20 8:41 p.m.4 views

CVE-2025-59464

A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through...

7.5CVSS5.5AI score0.00098EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/25 3:25 p.m.2 views

CVE-2025-68724

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

5.5CVSS6.2AI score0.00042EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:23 a.m.1 views

SUSE CVE-2025-68724

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

5.5CVSS7AI score0.00042EPSS
Exploits0References24
EUVD
EUVD
added 2025/12/24 12:30 p.m.1 views

EUVD-2025-205073

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

6.5AI score0.00042EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2025/12/24 10:33 a.m.3 views

CVE-2025-68724

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

5.5AI score0.00042EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2025/12/24 10:33 a.m.26 views

CVE-2025-68724 crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

0.00042EPSS
Exploits0References8
EUVD
EUVD
added 2025/12/16 3:30 p.m.1 views

EUVD-2025-203653

In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfsmatchclient If the TLS security policy is of type RPCXPRTSECTLSX509, then the certserial and privkeyserial fields need to match as well since they define the client's identity, as...

6AI score0.00018EPSS
Exploits0References3
CVE
CVE
added 2025/12/16 2:21 p.m.6 views

CVE-2025-68243

The CVE affects the Linux kernel NFS client TLS/X.509 handling in nfs_match_client(). When RPC_XPRTSEC_TLS_X509 is used, the cert_serial and privkey_serial fields must match to validate the client identity; otherwise, there can be unintended session reuse. The issue has been resolved in the Linux...

6.1AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2025/12/16 2:21 p.m.3 views

CVE-2025-68243 NFS: Check the TLS certificate fields in nfs_match_client()

In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfsmatchclient If the TLS security policy is of type RPCXPRTSECTLSX509, then the certserial and privkeyserial fields need to match as well since they define the client's identity, as...

6.3AI score0.00018EPSS
Exploits0References5
Rows per page
Query Builder