14 matches found
rocacheck
rocacheck パッケージ rocacheck は、RSA 鍵が破損した Infineon コードによって生成され、Coppersmith攻撃の再来 ROCA / CVE-2017-15361 による素因数分解に対して脆弱かどうかをチェックする鍵指紋アルゴリズムの Go 実装です。...
Detect-CVE-2017-15361-TPM
CVE-2017-15361 の脆弱性があるトラステッド プラットフォーム モジュールを検出する このリポジトリは、DoD管理者が有効なトラステッド プラットフォーム モジュール TPM のうち CVE-2017-15361 の脆弱性があるシステムを検出するのを支援するためのコンテンツを提供し、情報保証勧告 RSA Key Generation Vulnerability Affecting Trusted Platform Modules の補足資料です。このリポジトリのファイルは、こちらから zip ファイルとしてダウンロードできます here。...
ROCA-attack-on-vulnerability-CVE-2017-15361
ROCA-attack-on-vulnerability-CVE-2017-15361 このリポジトリには、トリノ工科大学で数学工学の学士号を取得するために作成した論文が含まれています。これはPythonとSageに基づいたスクリプトです。 このスクリプトの目的は、RSA鍵を生成し、ROCA攻撃に対して脆弱かどうかを評価し、ROCA攻撃を実行することです。 スクリプト内のコメントはイタリア語です。 フォルダ構造 root@kitploit: . └── Attacco-ROCA-sulla-vulnerabilita-CVE-2017-15361 The folder containin...
zeek-plugin-roca
Johanna::ROCA 이 플러그인은 CVE-2017-15361 키 탐지를 구현합니다. https://github.com/crocs-muni/roca 에서 제공되는 소스의 재구현입니다. 이 플러그인은 공개 키를 확인할 수 있는 두 가지 새로운 BIF를 제공합니다: rocavulnerablecert - 인증서가 취약한지 확인합니다 rocavulnerablemod - 모듈러스가 취약한지 확인합니다. 또한 이 플러그인은 자동으로 로드되는 스크립트를 포함하며, 네트워크 트래픽에서 CVE-2017-15361이 발견될 때 알림을 보낼...
Infineon-CVE-2017-15361
Infineon-CVE-2017-15361 コンピューターがCVE-2017-15361の影響を受けるInfineon TPMチップを使用しているかどうかを確認するためのシンプルなPowerShellスクリプトです。 重要: 管理者として実行する必要があります!! このスクリプトは、Windows 8.1およびWindows Server 2012以降のWindowsリリースでのみ動作します。 このスクリプトはMicrosoftから再利用されています:...
[SECURITY] Fedora 33 Update: roca-detect-1.2.12-15.fc33
This tool is related to the ACM CCS 2017 conference paper 124 Return of the Coppersmith=EF=BF=BD=EF=BF=BD=EF=BF=BDs Attack: Practical Factorization of Widely Used RSA Moduli. https://crocs.fi.muni.cz/public/papers/rsaccs17 Install this to test public RSA keys for the presence of the vulnerability...
Fedora: Security Advisory for roca-detect (FEDORA-2021-724c3aa51b)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
mangaseeonline.us Cross Site Scripting vulnerability OBB-1207280
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Releases Security Advisory for Windows Hello for Business
Microsoft has released a Security Advisory to address an issue in Windows Hello for Business WHfB. An attacker could exploit this issue on devices that were affected by CVE-2017-15361, also known as Return of Coppersmith’s Attack ROCA, to take control of an affected system. The Cybersecurity and...
ROCA: Vulnerable RSA key pairs generation (CVE-2017-15361)
An old Infineon RSA library does not properly generate RSA key pairs, therefore enabling an attacker to potentially infer a private key from a public key...
CVE-2017-15361
creationtimestamp| type| source ---|---|--- 2017-10-17 10:59:44+00:00| exploited| https://t.me/informationsecuritychannel/10054 2017-10-17 15:08:08+00:00| exploited| https://t.me/informationsecuritychannel/10060 2018-03-21 13:35:17+00:00| published-proof-of-concept|...
CVE-2017-15361
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...
Infineon RSA library does not properly generate RSA key pairs
Overview The Infineon RSA library version 1.02.013 does not properly generate RSA key pairs, which may allow an attacker to recover the RSA private key corresponding to an RSA public key generated by this library. This vulnerability is often cited as "ROCA" in the media. Description...
KLA11850 Microsoft Advisory for Microsoft Device
This advisory addresses CVE-2017-15361. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. This is a firmware vulnerability, and not a vulnerability in the operating system or a specific application. Original advisories ADV1700...