105 matches found
CRYPTO module null pointer reference vulnerability in multiple Huawei products
Huawei DP300, RP200, TE30/40/50/60, TP3106/3206, and ViewPoint 9030 are Huawei's all-in-one Desktop Intelligence products and HD video conferencing terminals for high-end customers. A buffer overflow vulnerability exists in the CRYPTO module of multiple Huawei products, which is due to the progra...
[SECURITY] Fedora 21 Update: nss-softokn-3.20.1-1.0.fc21
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 22 Update: nss-softokn-3.20.1-1.0.fc22
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 23 Update: nss-softokn-3.20.1-1.0.fc23
Network Security Services Softoken Cryptographic Module...
Cisco ASA Unauthorized Modification Vulnerability (Cisco-SA-20150714-CVE-2015-4458)
This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4458
CVE-2015-4458 affects Cisco ASA and related products where the Cavium cryptographic-module TLS code fails to verify the MAC field. The root cause is an error in the Cavium firmware that allows a remote attacker to modify TLS packets without detection, enabling MITM content spoofing. Connected sou...
Cisco ASA Message Authentication Code Vulnerability (Cisco-SA-20150714-CVE-2015-4458)
Cisco ASA is prone to a Message Authentication Code checking vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
The vulnerability of Cisco ASA network firewalls allows attackers to gain access to traffic transmitted via IPSec and IKEv2 protocols.
The vulnerability of the Cisco ASA firewall’s cryptographic module is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to traffic transmitted via IPSec and IKEv2 protocols through a “man-in-the-middle...
postgresql: pgcrypto has multiple error messages for decryption with an incorrect key.
It was discovered that the pgcrypto module could return different error messages when decrypting certain data with an incorrect key. This could potentially help an authenticated user to launch a possible cryptographic attack, although no suitable attack is currently known...
Cisco ASA AES-GCM Vulnerability (Cisco-SA-20150616-CVE-2015-4550)
Cisco ASA is prone to an encrypted IPSec or IKEv2 modification vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
CVE-2015-4550
The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance ASA devices with software 9.33 and 9.41.1 does not verify the AES-GCM Integrity Check Value ICV octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, ak...
Cisco Adaptive Security Appliance Encrypted IPSec or IKEv2 Packet Modification Vulnerability
A vulnerability in the AES-GCM code of Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the contents of an encrypted IPSec or IKEv2 packet, and for those modifications not to be detected. The vulnerability is due to an error on the firmware of the...
[SECURITY] Fedora 20 Update: nss-softokn-3.19.1-1.0.fc20
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 22 Update: nss-softokn-3.19.1-1.0.fc22
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 21 Update: nss-softokn-3.19.1-1.0.fc21
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 20 Update: nss-softokn-3.17.3-1.fc20
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 19 Update: nss-softokn-3.17.1-2.fc19
Network Security Services Softoken Cryptographic Module...
[SECURITY] Fedora 21 Update: nss-softokn-3.17.1-2.fc21
Network Security Services Softoken Cryptographic Module...