310 matches found
UBUNTU-CVE-2017-9434
Crypto++ aka cryptopp through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter...
PT-2017-4225 · Go · Golang.Org/X/Crypto/Ssh
Name of the Vulnerable Software and Affected Versions: golang.org/x/crypto/ssh versions prior to the version that includes commit e4e2799 Description: The issue is related to the default behavior of the Go SSH library, which does not verify host keys. This facilitates man-in-the-middle attacks if...
CVE-2016-7544
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based malloca and freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed...
[SECURITY] Fedora 24 Update: botan-1.10.14-3.fc24
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
[SECURITY] Fedora 25 Update: botan-1.10.14-3.fc25
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
Crypto++ Denial of Service Vulnerability
Crypto++ aka cryptopp is a free C++ library. A security vulnerability exists in Crypto++. A local attacker could exploit this vulnerability to cause a denial of service resource consumption...
[SECURITY] Fedora 23 Update: libgcrypt-1.6.6-1.fc23
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
[SECURITY] Fedora 24 Update: libgcrypt-1.6.6-1.fc24
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
GPG Patches 18-Year-Old Libgcrypt RNG Bug
New versions of Libgcrypt and Gnu Privacy Guard GnuPG or GPG released on Wednesday include security fixes for vulnerabilities discovered in the mixing functions of the Libgcrypt random number generator. The flaws were privately disclosed by Felix Dörre and Vladimir Klebanov of Karlsruhe Institute...
[SECURITY] Fedora 23 Update: libgcrypt-1.6.5-1.fc23
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
[SECURITY] Fedora 24 Update: libgcrypt-1.6.5-1.fc24
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
CVE-2016-3959
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...
[SECURITY] Fedora 22 Update: botan-1.10.13-1.fc22
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
[SECURITY] Fedora 23 Update: botan-1.10.13-1.fc23
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
[SECURITY] Fedora 24 Update: botan-1.10.13-1.fc24
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or cause other adverse effects
The vulnerability of the fmtstr function in the OpenSSL library crypto/bio/bprint.c is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects such as reading beyond the memory boundaries using a long ASN.1 data string...
OpenSSL Denial of Service Vulnerability (CNVD-2016-01479)
OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...
[SECURITY] Fedora 22 Update: botan-1.10.12-1.fc22
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
Debian DSA-3457-1 : iceweasel - security update (SLOTH)
Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors and a buffer overflow may lead to the execution of arbitrary code. In addition the bundled NSS crypto library addresses the SLOTH attack on TLS 1.2...