[SECURITY] Fedora 29 Update: openssl-1.1.1a-1.fc29

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Security Bulletin: IBM API Connect is affected by multiple GSKit and OpenSSL vulnerabilities

Summary IBM API Connect has addressed multiple vulnerabilities in GSKit and OpenSSL. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit this vulnerability to...

Schneider Electric IIoT Monitor Hard-coded Cryptographic Key Information Disclosure Vulnerability

This vulnerability allows the decryption of the administrator password on vulnerable installations of Schneider Electric IIoT Monitor. Authentication is not required to exploit this vulnerability. The specific flaw exists within encryption of the administrator password in the AESEncryption class....

Key Reinstallation Attack (KRACK)

wpasupplicant is vulnerable to key reinstallation attack KRACK. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes used by the WPA2 protocol...

Unauthorised Modification

The java-1.8.0-openjdk packages is vulnerable to unauthorised modification. The vulnerability exists because it accepts ECSDA signatures using non-canonical DER encoding, leading to accept incorrect format not accepted by other cryptographic tools...

Denial Of Service

Network Security Services NSS is vulnerable to denial of service DoS. The vulnerability is possible because of the flaw in the way NSS handles cryptographic data from the network, leading to an application crash or execution of arbitrary code with the permission of the user running the applicatio...

Unsafe Pseudorandom Number Generation Through The Use Of Insecure Entropy Source

uuid and node-uuid have flaws which lead to the use of an insecure entropy source "Math.random" to generate pseudorandom numbers instead of using a secure Cryptographic API...

Weak Cryptographic Protection Mechanisms

OpenSSL has weak cryptographic protection mechanism. The way that the BNsqr function in OpenSSL is implemented is incorrect. It doesn't not calculate the square of a BIGNUM value making it easier for attackers to get past the protection mechanism...

Brute-force Attack

ntp is vulnerable to brute-force attacks. The vulnerability exists as the configauth function in ntpd, when the authkey is not configured, improperly generates a key that allows remote attacker to defeat the cryptographic protection mechanisms via brute-force...

PORTIER 4.4.4.2 / 4.4.4.6 Cryptographic Issues Exploit

Exploit for php platform in category web applications PORTIER 4.4.4.2 / 4.4.4.6 Cryptographic Issues Exploit Product: PORTIER Affected Versions: 4.4.4.2, 4.4.4.6 Tested Versions: 4.4.4.2, 4.4.4.6 Vulnerability Type: Cryptographic Issues CWE-310 Risk Level: HIGH Solution Status: Open Manufacturer...

PORTIER 4.4.4.2 / 4.4.4.6 Cryptographic Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-011 Product: PORTIER Affected Versions: 4.4.4.2, 4.4.4.6 Tested Versions: 4.4.4.2, 4.4.4.6 Vulnerability Type: Cryptographic Issues CWE-310 Risk Level: HIGH Solution Status: Open Manufacturer Notification: 2018-06-13 Solution...

[SECURITY] Fedora 29 Update: mingw-nettle-3.4.1-1.fc29

Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...

[SECURITY] Fedora 28 Update: mingw-nettle-3.4.1-1.fc28

Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...

PT-2019-5537 · Red Hat +2 · Red Hat +2

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux kernel versions prior to 5.0 Description: A buffer over-read flaw was found in the crypto authenc extractkeys function in the crypto/authenc.c file of the IPsec Cryptographic algorithm's module, authenc. This issue...

The vulnerability of the RSA key generation algorithm in the OpenSSL library allows a hacker to recover the private key.

The vulnerability of the RSA key generation algorithm in the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor, operating remotely, to recover the secret key...

Schneider Electric IIoT Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: IIoT Monitor --------- Begin Update A Part 1 of 2 -------- Vulnerabilities: Path Traversal, Unrestricted Upload of File with Dangerous Type, XXE, Cryptographic Issues...

Security Bulletin: IBM MQ Appliance is affected by weak cryptographic algorithms (CVE-2018-1665)

Summary IBM MQ Appliance has addressed the following weak cryptographic algorithms vulnerability. Vulnerability Details CVEID: CVE-2018-1665 DESCRIPTION: IBM WebSphere DataPower Appliances uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive...

Code injection

Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD...

Code injection

Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636,...

Code injection

Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD...