CVE-2022-21449-vuln-test

CVE-2022-21449 Vulnerability tester Introduction There's a new CVE-2022-21449 that had bug in ECDSA signature verification. It's one of the algorithms used with JWT for example. Citing the blog post If you have deployed Java 15, Java 16, Java 17, or Java 18 in production then you should stop what...

psychic-signatures

CVE-2022-21449: Psychic Signatures in Java...

jfrog-CVE-2022-21449

CVE-2022-21449 Overview This tool allows to perform a quick scan of compiled code archives .jar, .war etc in order to check for vulnerability to CVE-2022-21449 by looking for the string indicating the use of ECDSA algorithm. The tool uses Python3 with no additional prerequisites. Usage...

AIS3-2024-Project-D5Team

AIS3-2024-Project-TeamD5 Reappear-CVE-2022-21449-TLS-PoC Before we begin, I would like to thank and pay tribute to some people 1 Neil Madden ; discovered and disclosed CVE-2022-21449, and here is his excellent WriteUp 2 Khaled Nassar ; completed the PoC for easy Demo 3 YuZheng GeGe's Security...

CVE-2022-21449

This repository does not have a README...

CVE-2022-21449-showcase

Demo program to showcase CVE-2022-21449 Pls run with JDK 17.0.0 O yeah here is screenshot...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 also dubbed Psychic Signatures in the vulnerability writeup by Neil Madden Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server. The malicious server presents a valid as of 2022-04-20 cert chain for www.google.com which...

CVE-2022-21449

CVE 2022 21449 python implementation Questo progetto permette di: Tracciare una curva ellittica con i parametri desiderati, su un corpo finito o no Generare una coppia di chiavi a partire da una curva ellittica data Crittografare / Decrittografare un messaggio con ECIES Firmarlo / verificarlo...

SignChecker

SignChecker Testwerkzeug zur Demonstration der Schwachstelle CVE-2022-21449...

CVE-2022-21449

CVE-2022-21449 Zeek-Skript zur Erkennung von Exploit-Versuchen von CVE-2022-21449, die auf TLS-Clients abzielen. Funktioniert nur mit TLS 1.2 und niedriger. Installation zkg install https://github.com/thack1/CVE-2022-21449 Ausführen Gegen die mitgelieferte Pcap-Datei ausführen: $ zeek -Cr...

K32172755: Multiple Java vulnerabilities CVE-2022-21426, CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, and CVE-2022-21496

Security Advisory Description CVE-2022-21426 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5,...

AlmaLinux 9 : java-17-openjdk (ALSA-2022:1729)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1729 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

Summary Java is used by IBM Robotic Process Automation for Cloud Pak as part of several container services that run Java applications. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated...

RHEL 9 : java-17-openjdk (RHSA-2022:1729)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1729 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

SUSE: Security Advisory (SUSE-SU-2022:2650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for java-1_8_0-ibm (SUSE-SU-2022:2650-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2540-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2540-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 7 Fix Pack 10 bsc1201643, including fixes for: - CVE-2022-21476 bsc1198671, CVE-2022-21449 bsc1198670, CVE-2022-21496 bsc1198673, CVE-2022-21434 bsc1198674, CVE-2022-21426 bsc1198672, CVE-2022-21443...

OESA-2022-1702 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2...