CVE-2022-21449-showcase

Demo program to showcase CVE-2022-21449 Pls run with JDK 17.0.0 O yeah here is screenshot...

jfrog-CVE-2022-21449

CVE-2022-21449 Overview This tool allows to perform a quick scan of compiled code archives .jar, .war etc in order to check for vulnerability to CVE-2022-21449 by looking for the string indicating the use of ECDSA algorithm. The tool uses Python3 with no additional prerequisites. Usage...

CVE-2022-21449

This repository does not have a README...

AIS3-2024-Project-D5Team

AIS3-2024-Project-TeamD5 Reappear-CVE-2022-21449-TLS-PoC Before we begin, I would like to thank and pay tribute to some people 1 Neil Madden ; discovered and disclosed CVE-2022-21449, and here is his excellent WriteUp 2 Khaled Nassar ; completed the PoC for easy Demo 3 YuZheng GeGe's Security...

CVE-2022-21449-vuln-test

CVE-2022-21449 Vulnerability tester Introduction There's a new CVE-2022-21449 that had bug in ECDSA signature verification. It's one of the algorithms used with JWT for example. Citing the blog post If you have deployed Java 15, Java 16, Java 17, or Java 18 in production then you should stop what...

SignChecker

SignChecker Test tool to demonstrate the vulnerability of CVE-2022-21449...

CVE-2022-21449

CVE-2022-21449 Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients. Only works for TLS 1.2 and below. Install zkg install https://github.com/thack1/CVE-2022-21449 Run Run against supplied pcap file: $ zeek -Cr pcaps/CVE-2022-21449.pcap CVE-2022-21449 Example Notice...

psychic-signatures

CVE-2022-21449: Psychic Signatures in Java...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 also dubbed Psychic Signatures in the vulnerability writeup by Neil Madden Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server. The malicious server presents a valid as of 2022-04-20 cert chain for www.google.com which...

CVE-2022-21449

CVE 2022 21449 python implementation This project allows you to: Plot an elliptic curve with desired parameters, over a finite field or not Generate a key pair from a given elliptic curve Encrypt / Decrypt a message via ECIES Sign / verify using ECDSA Simulate an exploitation of CVE 2022 21449 Fi...

K32172755: Multiple Java vulnerabilities CVE-2022-21426, CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, and CVE-2022-21496

Security Advisory Description CVE-2022-21426 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5,...

AlmaLinux 9 : java-17-openjdk (ALSA-2022:1729)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1729 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

Summary Java is used by IBM Robotic Process Automation for Cloud Pak as part of several container services that run Java applications. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated...

RHEL 9 : java-17-openjdk (RHSA-2022:1729)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1729 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

SUSE: Security Advisory (SUSE-SU-2022:2650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for java-1_8_0-ibm (SUSE-SU-2022:2650-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2540-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2540-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 7 Fix Pack 10 bsc1201643, including fixes for: - CVE-2022-21476 bsc1198671, CVE-2022-21449 bsc1198670, CVE-2022-21496 bsc1198673, CVE-2022-21434 bsc1198674, CVE-2022-21426 bsc1198672, CVE-2022-21443...

OESA-2022-1702 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2...