185 matches found
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 is affected by an Out‑of‑Bounds read in the TC subsystem (crypto_tc.c). The CVSS data shows NETWORK attack vector, LOW complexity, NONE prerequisites, with no user interaction, and a HIGH availability impact (I and A are notable; C and I are None, C=A). No exploitation detai...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44910
NASA CryptoLib v1.3.0 contains an Out-of-Bounds read in the AOS subsystem (crypto_aos.c). The vulnerability is described across multiple feeds, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, no privileges required, and a HIGH impact on availability. No specific rem...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...
PT-2024-31298 · Nasa · Nasa Cryptolib
Name of the Vulnerable Software and Affected Versions: NASA CryptoLib version 1.3.0 Description: The issue is related to an Out-of-Bounds read via the TC subsystem. Specifically, the problem is identified in the crypto aos.c file. Recommendations: For NASA CryptoLib version 1.3.0, consider...
CVE-2024-44912
CVE-2024-44912 affects NASA CryptoLib v1.3.0, with an Out-of-Bounds read in the TM subsystem (crypto_tm.c). The vulnerability’s impact per the provided data is Availability (A) impact high, no confidentiality or integrity impact, and network attack vector with no user interaction required. The co...
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...
The vulnerability of the SAP CommonCryptoLib library, related to pointer dereferencing errors, allows a perpetrator to trigger a service failure.
The vulnerability of the SAP CommonCryptoLib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
CVE-2023-26084
The armv8decaesgcmfull API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable...
PT-2023-20477 · Arm · Arm Aarch64Cryptolib
Name of the Vulnerable Software and Affected Versions: Arm AArch64cryptolib versions before 86065c6 Description: The issue concerns the armv8 dec aes gcm full API, which fails to verify the authentication tag of AES-GCM protected data. This failure is due to an improperly initialized variable,...
Malicious code in cryptolib-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aadad8a99682bbe6501c9891001de7c4e5c6a2519150152340dbc3c4b2c8f53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2257 Malicious code in cryptolib-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aadad8a99682bbe6501c9891001de7c4e5c6a2519150152340dbc3c4b2c8f53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...