Critical Photon OS Security Update - PHSA-2024-5.0-0187

Updates of 'linux-rt', 'linux-esx', 'linux-secure', 'linux', 'python3-cryptography', 'python3-paramiko', 'libssh' packages of Photon OS have been released...

CVE-2023-49083 affecting package python-cryptography for versions less than 3.3.2-6

CVE-2023-49083 affecting package python-cryptography for versions less than 3.3.2-6. A patched version of the package is available...

RansomwareSim - A Simulated Ransomware

Overview RansomwareSim is a simulated ransomware application developed for educational and training purposes. It is designed to demonstrate how ransomware encrypts files on a system and communicates with a command-and-control server. This tool is strictly for educational use and should not be use...

The vulnerability of the web server of the microprogramming software for the universal input/output controller ioLogik, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the web-server of the microprogramming software for universal input/output controller ioLogik is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

Security researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell SSH cryptographic network protocol that could allow an attacker to downgrade the connection's security by breaking the integrity of the secure channel. Called Terrapin CVE-2023-48795, CVSS score:...

PT-2024-12380 · Qualcomm · Snapdragon +74

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cryptographic problem in the automotive sector, specifically when unwrapping the key secs2d and verifying it with RPMB data. No...

Upgraded Q -> 2 from #8 [1703832984112]

Judge has assessed an item in Issue 8 as 2 risk. The relevant finding follows: Remove WLP from whitelist should not block user from removing WLP --- The text was updated successfully, but these errors were encountered: All reactions...

Cryptography has a denial of service vulnerability

Cryptography is a Python library that provides cryptography functionality. Cryptography suffers from a denial of service vulnerability that can be exploited by an attacker to cause a program to crash...

CVE-2023-5962

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization...

PT-2023-8045 · Moxa · Iologik E1200 Series

Name of the Vulnerable Software and Affected Versions: ioLogik E1200 Series firmware versions v3.3 and prior Description: A weak cryptographic algorithm vulnerability has been identified, which can help an attacker compromise the confidentiality of sensitive data and may lead to unexpected...

Fedora: Security Advisory (FEDORA-2023-a854153d7a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2023-4.0-0533

Updates of 'python3-cryptography', 'glibc' packages of Photon OS have been released...

Weak Cryptography

blinksocks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the usage of weak encryption algorithms and fixed initialization vectors IV within /presets/ssr-auth-chain.js. This issue can be exploited by an attacker to disclose sensitive encrypted information via brute...

Dell NetWorker Virtual Edition Weak SSH Cryptography (DSA-2023-358)

The version of Dell NetWorker Virtual Edition installed on the remote Linux host is prior to 19.7, 19.7.0.x prior to 19.7.0.6, 19.7.1, 19.8.x prior to 19.8.0.4 or 19.9.x prior to 19.9.0.3. It is, therefore, affected by vulnerability in the SSH component. Due to use of deprecated cryptographic...

Silicon Labs Gecko SDK Security Vulnerability

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.4.0 and prior versions, which stems from a...

CVE-2023-49083

A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "loadpempkcs7certificates" or "loadderpkcs7certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service DoS for any...

SUSE-SU-2023:4921-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS7 bundle bsc1217592...

ALSA-2023:7877 Low: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Excessive time spent checking DH keys and parameters CVE-2023-3446 OpenSSL: Excessive time spent...

OpenSSH Security Vulnerabilities

OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers from the Canadian OpenBSD Project Group. The tools are an open source implementation of the SSH protocol that supports encryption of all transmissions, effectively blocking eavesdropping, connection...

Security Bulletin: Vulnerability in Cryptography package for Python affects IBM Process Mining CVE-2023-49083

Summary There is a vulnerability in Cryptography package for Python that could allow an attacker to execute denial of service on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details...