496 matches found
Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
Overview Bluetooth firmware or operating system software drivers may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device. Description CWE-325: Missi...
FreeBSD : FreeBSD -- Lazy FPU State Restore Information Disclosure (4e07d94f-75a5-11e8-85d1-a4badb2f4699)
A subset of Intel processors can allow a local thread to infer data from another thread through a speculative execution side channel when Lazy FPU state restore is used. Impact : Any local thread can potentially read FPU state information from other threads running on the host. This could include...
FreeBSD -- Lazy FPU State Restore Information Disclosure
Problem Description: A subset of Intel processors can allow a local thread to infer data from another thread through a speculative execution side channel when Lazy FPU state restore is used. Impact: Any local thread can potentially read FPU state information from other threads running on the host...
Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System Manager (FSM) (CVE-2016-0777, CVE-2016-0778)
Summary An information leak flaw and buffer overflow flaw in the way the OpenSSH client roaming feature was implemented affects IBM Flex System Manager FSM. Vulnerability Details CVEID: CVE-2016-0777 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused by a...
The vulnerability of the `ce_pkcs1_pss_padding_verify_auto_recover_saltlen` function in the Qualcomm Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cepkcs1psspaddingverifyautorecoversaltlen function in the Android operating system is related to errors in managing cryptographic keys. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Multiple critical vulnerabilities in AGFEO smart home ES 5xx/6xx products
Vendor description: AGFEO GmbH & Co. KG is a vendor of telephone systems and other tele-communication products like DECT phones, headsets or smart home products as well. Business recommendation: The available patches should be installed immediately. SEC Consult recommends not to use this product ...
Android - 'getpidcon' Permission Bypass in KeyStore Service
The keystore binder service "android.security.IKeystoreService" allows users to issue several commands related to key management, including adding, removing, exporting and generating cryptographic keys. The service is accessible to many SELinux contexts, including application contexts, but also...
HP Insight Control For VMware vCenter Server 7.3 Insecure Permissions
/ Exploit Title: HP Insight Control for VMware vCenter Server Multiple Vulnerabilities Date: 11/05/2014 Author: Glafkos Charalambous Version: 7.3 Vendor: HP Vendor URL: http://www.hpe.com HP Case: SSRT101619 Product Description: HP Insight Control for VMware vCenter Server Insight Control for...
Lenovo XClarity Controller (XCC) Risk of Low Entropy - us
Lenovo Security Advisory: LEN-17904 Potential Impact: An attacker could eavesdrop on encrypted SSH or https-based systems management communications web UI, Redfish, CIM with the server’s XClarity Controller, or spoof the XCC and thereby capture user access credentials for the XCC. The XCC is also...
Lenovo XClarity Controller (XCC) Risk of Low Entropy - Lenovo Support US
No description provided...
Linux Memory Cryptographic Keys Extractor: CryKeX
Some work has been already published regarding the subject of cryptograhic keys security within DRAM. Basically, we need to find something that looks like a key entropic and specific length and then confirm its nature by analyzing the memory structure around it C data types. The idea is to dump...
The vulnerability of the WPA2 protocol, related to errors in managing STK-keys, allows access to encrypted information transmitted over a wireless network.
The vulnerability of the WPA2 protocol, which provides security for Wi-Fi wireless networks, is related to errors in the management of cryptographic keys. Exploiting this vulnerability allows a perpetrator within the range of a Wi-Fi network to gain access to encrypted information transmitted ove...
Factorization Flaw in TPM Chips Makes Attacks on RSA Private Keys Feasible
A flawed Infineon Technology chipset used on PC motherboards to securely store passwords, certificates and encryption keys risks undermining the security of government and corporate computers protected by RSA encryption keys. In a nutshell, the bug makes it possible for an attacker to calculate a...
Information disclosure
An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...
CVE-2016-4924
An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...
CVE-2017-10606
Version 4.40 of the TPM Trusted Platform Module firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration...
Command injection
Version 4.40 of the TPM Trusted Platform Module firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration...
CVE-2016-4924 vMX: Information leak vulnerability
An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...
CVE-2017-10606
The CVE-2017-10606 entry concerns Juniper Networks SRX300 Series firewall TPM firmware 4.40. Connected CNVD-2017-32096 describes a vulnerability in TPM key generation that could allow an attacker to decrypt sensitive configuration data, affecting the SRX300 Series and no other platforms. The root...
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities
Today Microsoft released patches covering 62 vulnerabilities as part of October’s Patch Tuesday update, with 30 of them affecting Windows. Patches covering 28 of these vulnerabilities are labeled as Critical, and 33 can result in Remote Code Execution. According to Microsoft, a vulnerability in...