Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high-performance wrapper/proxy from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the processing of client certificates that allows an attacker to create a denial of servic...

DEBIAN-CVE-2024-27355

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service CPU consumption for decodeOID...

CVE-2024-27355

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service CPU consumption for decodeOID...

Python cryptography code issue vulnerability

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in Python cryptography versions 3.1 through 41.0.6, which stems from a null...

The vulnerability of Microsoft On-Premises Data Gateways lies in security configuration errors, allowing attackers to circumvent security restrictions.

The vulnerability of Microsoft On-Premises Data Gateways is related to errors in security settings when processing certificates. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending a specially crafted web request...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

USN-6438-2 .Net regressions

USN-6438-1 fixed vulnerabilities in .Net. It was discovered that the fix for CVE-2023-36799 was incomplete. This update fixes the problem. Original advisory details: Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to...

USN-6438-1 dotnet6, dotnet7 vulnerabilities

Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of service. CVE-2023-36799 It was discovered that the .NET Kestrel web server did not properly handle HTTP/2 requests. A remote attacker could possibly...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

dotnet: Denial of Service with Client Certificates using .NET Kestrel

A vulnerability was found in dotnet. This issue can lead to a denial of service when processing X.509 certificates...

USN-6362-1 dotnet6, dotnet7 vulnerability

Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of service...

The vulnerability of the microprogrammed software of Moxa’s TN-4900 and TN-5900 series routers allows for the execution of arbitrary code.

The vulnerability of Moxa TN-4900 and TN-5900 series router microprogramming software is related to errors in the processing of input data during the certificate generation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...