SUSE SLES15: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2023:1703-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1703-1 advisory. Security fixes: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624. Other fixes: -...

SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2023:1704-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1704-1 advisory. - A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains...

FreeBSD : OpenSSL -- Excessive Resource Usage Verifying X.509 Policy Constraints (1ba034fb-ca38-11ed-b242-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1ba034fb-ca38-11ed-b242-d4c9ef517024 advisory. - A security vulnerability has been identified in all supported versions of OpenSSL related to the...

Design/Logic Flaw

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...

CVE-2023-0464

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...

CVE-2023-0464

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...

OpenSSL 3.0.0 < 3.0.9 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.9 advisory. - The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate...

OpenSSL 1.0.2 < 1.0.2zh Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2zh. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2zh advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact...

OpenSSL 1.1.1 < 1.1.1u Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1u. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1u advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary...

CVE-2022-26115

A use of password hash with insufficient computational effort vulnerability CWE-916 in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords...

CVE-2022-26115

Fortinet FortiSandbox is affected by CVE-2022-26115 due to a use of a password hash with insufficient computational effort (CWE-916) prior to version 4.2.0. An attacker with access to the password database could mount bulk guessing attacks to recover passwords. Connected sources confirm the issue...

CVE-2022-26115

A use of password hash with insufficient computational effort vulnerability CWE-916 in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords...

FortiSandbox - Improper password storage mechanism

A use of password hash with insufficient computational effort vulnerability CWE-916 in FortiSandbox may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords...

Siemens Desigo PXC and DXR Devices Use of Password Hash with Insufficient Computational Effort (CVE-2022-24041)

A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The web application stores the PBKDF2 derived key of users passwords with a low...

Vulnerability of SNC_io parser<EW>::read_volume() seh->twin() component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the SNCioparser function: readvolume, seh-twin in the NefS2/SNCioparser.h component, and the algorithms from the Computational Geometry Library CGAL are related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Vulnerability of SNC_io parser <EW>: read_sedge(); seh->incident_sface(); component Nef_S2/SNC_io parser.h; library of computational geometry algorithms CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the NefS2/SNCio parser.h file, and the associated CGAL computational geometry algorithm libraries, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker ...

Vulnerability of the SNC_io parser function <EW>::read_sface() and SD.link_as_face_cycle() in the Nef_S2/SNC_io parser.h component of the computational geometry algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCioparser function, namely readsface and SD.linkasfacecycle, in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Vulnerability of the PM_io parser function: <PMDEC>::read_vertex(). Halfedge_of[], part of the Nef_2/PM_io parser.h library, which belongs to the Computational Geometry Algorithms library CGAL. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMio parser function ::readvertex is related to unvalidated array indexing in the component Nef2/PMio parser.h from the Computational Geometry Library CGAL library. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

Vulnerability of the SNC_io parser function <EW>::read_sedge() and seh->sprev() in the Nef_S2/SNC_io parser.h component. This component is part of the Computational Geometry Algorithms Library CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, as part of the CGAL computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

Vulnerability of SNC_io parser<EW>: read_sface() – allows an attacker to access confidential data, compromise its integrity, and cause service failures. This vulnerability resides in the Nef_S2/SNC_io parser.h library, which is part of the Computational Geometry Algorithms library.

Vulnerability of SNCio parser: ::readsface; sfh-boundaryentryobjects. The Edgeof component NefS2/SNCio parser.h is part of the computational geometry library CGAL. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows unauthorized access to...