11949 matches found
CVE-2022-22423
IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...
Input validation
IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...
CVE-2022-22423
IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...
CVE-2022-22423
IBM Common Cryptographic Architecture CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769 could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596...
CVE-2022-22423
IBM Common Cryptographic Architecture (CCA) is affected by CVE-2022-22423, causing denial of service via improper input validation. Affected products/versions include CCA 5.x MTM for 4767 (5.0.0–5.7.11) and CCA 7.x MTM for 4769 (7.0.0–7.3.43). Remediation: upgrade to CCA 5.7.12 or later (AIX/Linu...
IBM Common Cryptographic Architecture 输入验证错误漏洞
IBM Common Cryptographic Architecture is a cryptographic platform from IBM, USA. It provides a number of features to protect financial transactions. A security vulnerability exists in IBM Common Cryptographic Architecture that stems from insufficient input validation, which can be exploited by an...
PT-2022-15422 · Ibm · Ibm Common Cryptographic Architecture
Name of the Vulnerable Software and Affected Versions: IBM Common Cryptographic Architecture CCA versions 5.x through 7.x Description: The issue is related to improper input validation, which could allow a local user to cause a denial of service. Recommendations: For versions 5.x through 7.x,...
The vulnerability of the implementation of the shim_lock verification mechanism in the Grub2 operating system allows a perpetrator to execute arbitrary code and gain full control over the device.
The vulnerability of the shimlock verification mechanism in the Grub2 operating system’s loader is related to incorrect checking of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain full control over the device...
PT-2022-22662 · Node.Js +6 · Node.Js +6
Name of the Vulnerable Software and Affected Versions: Node.js version 18 Description: A weak randomness issue exists in the WebCrypto keygen due to a change with EntropySource in SecretKeyGenTraits::DoKeyGen in src/crypto/crypto keygen.cc. There are two main problems: 1. The return value of...
GHSA-CMR8-5W4C-44V8 Fastly Compute@Edge JS Runtime has fixed random number seed during compilation
Impact Math.random and crypto.getRandomValues methods failed to use sufficiently random values. The initial value to seed the CSPRNG cryptographically secure pseudorandom number generator was baked-in to the final WebAssembly module meaning the sequence of numbers generated was predictable for th...
Design/Logic Flaw
The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the Math.random and crypto.getRandomValues methods fail to use sufficiently random values. The initial value to seed...
CVE-2022-39218
The CVE-2022-39218 vulnerability affects Fastly’s Compute@Edge JS Runtime. In versions before 0.5.3, Math.random and crypto.getRandomValues do not use sufficiently random values because the seed for the PRNG was baked into the final WebAssembly module, making the random sequence predictable for t...
CVE-2022-39218 Random number seed fixed during compilation
The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the Math.random and crypto.getRandomValues methods fail to use sufficiently random values. The initial value to seed...
openssl-ibmca bug fix update
An update is available for openssl-ibmca. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The openssl-ibmca package provides a dynamic OpenSSL engine for the IBM...
Important: golang
Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...
Important: golist
Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...
Improper Verification Of Cryptographic Signatures
tuf improperly verifies cryptographic signatures. The vulnerability exists because the verifyrootselfsigned function of updater.py does not properly verify self-signatures for new root metadata with multiple signatures having the same keyid which allows an attacker to bypass the intended signatur...
CVE-2022-25652
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking...
