11821 matches found
CVE-2023-33054
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
Design/Logic Flaw
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
CVE-2023-33054
CVE-2023-33054 is linked to a cryptographic issue in the Qualcomm GPS HLOS Driver during GNSS assistance data download. Connected PT-12561 entries and vendor bulletins corroborate the GPS HLOS Driver context, but none of the connected documents provide concrete affected versions, root-cause detai...
CVE-2023-33054 Improper Authentication in GPS HLOS Driver
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
Google Go Security Vulnerability
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A security vulnerability exists in Google Go versions prior to 1.20, which stems from the fact that deleting PKCS1 padding can lead to the disclosure of timing information, which...
Medium: samba
Issue Overview: When doing NTLM authentication, the client sends replies to cryptographic challenges back to the server. These replies have variable length. Winbind did not properly bounds-check the lan manager response length, which despite the lan manager version no longer being used is still...
CVE-2023-49083
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling loadpempkcs7certificates or loadderpkcs7certificates could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service...
PT-2023-24161 · Qualcomm · Gps Hlos Driver
Name of the Vulnerable Software and Affected Versions: GPS HLOS Driver affected versions not specified Description: A cryptographic issue exists in the GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Recommendations: At the moment, there is no information about a newer version th...
OESA-2023-1860 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: An out-of-bounds read vulnerability was found in Netfilter Connection Tracking conntrack in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.CVE-2023-39197 A null pointer...
OESA-2023-1859 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: An out-of-bounds read vulnerability was found in Netfilter Connection Tracking conntrack in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.CVE-2023-39197 A null pointer...
The vulnerability of the graphics driver of AMD Radeon microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the graphics driver of AMD Radeon microprogramming software is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the RVTools virtualization audit application, related to errors in cryptographic transformations, allows unauthorized access to protected information.
The vulnerability of the RVTools virtualization audit application is related to errors in cryptographic transformations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in Python Cryptographic Authority [CVE-2023-38325]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in Python Cryptographic Authority, caused by an encoding mismatch regarding critical options with OpenSSH CVE-2023-38325. Python Cryptographic Authority is used for cryptography in our our...
CVE-2023-49087
A flaw was found in xml-security due to insufficient verification of data authenticity. If an attacker manipulates the canonicalized version's DigestValue, the cryptographic signature on the SignedInfo tree could be forged...
Code injection
xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree the one that contain...
CVE-2023-49087 Validation of SignedInfo
xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree the one that contain...
CVE-2023-49087 Validation of SignedInfo
xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree the one that contain...
DEBIAN-CVE-2023-49092
RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...
GHSA-WW7X-3GXH-QM6R Validation of SignedInfo
Validation of an XML Signature requires verification that the hash value of the related XML-document after any optional transformations and/or normalizations matches a specific DigestValue-value, but also that the cryptografic signature on the SignedInfo-tree the one that contains the DigestValue...
[SECURITY] [DLA 3669-1] cryptojs security update
Debian LTS Advisory DLA-3669-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 27, 2023 https://wiki.debian.org/LTS Package : cryptojs Version : 3.1.2+dfsg-2+deb10u1 CVE ID : CVE-2023-46233 Debian Bug : 1055525 Thomas Neil James Shadwell reported that...